{"as_of":"2026-08-14T18:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f79395d89bdb1b67bd421bf74d44dd08c2e5a929466f23f0b4777f0ef73c4c03","coverage":[{"denominator":101,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T08:24:22.375901Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.06608/citation-record","integrity":"/paper/2607.06608/integrity","json":"/paper/2607.06608/citation-record.json","paper":"/paper/2607.06608"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.308425Z","title":"Introducing chatgpt,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.308425Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:4ba8e3358ff6a0671f6a67fe9b4c67ab74a8b9fafe66370528794495872d4f03","observation_id":"536244eb-cdb7-473a-8e8f-c74eb1b08923","resolution":{"observed_at":"2026-08-02T08:24:12.308425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.399680Z","title":"Privacy perceptions of custom gpts by users and creators,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.399680Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:fa885528dc2b989f270b13cbea3bf5f56019e6a0516484824592d6971697e792","observation_id":"c6960d47-eef6-40b0-b49d-586fad1c6f75","resolution":{"observed_at":"2026-08-02T08:24:12.399680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.485263Z","title":"Openclaw — personal ai assistant,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.485263Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:cc8baedbc0456dc179d3d4f978fec49b21a2bcb99108fade1dbbb14bf9fca2da","observation_id":"eab7536e-06e7-4814-8201-9d892260ccea","resolution":{"observed_at":"2026-08-02T08:24:12.485263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.604737Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.604737Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:42447584101010a9361ae813011eb213e32503585b861a48fd3a4369c73c0de6","observation_id":"398ee8e5-f540-42a3-ab60-cffe0f30b7cc","resolution":{"observed_at":"2026-08-02T08:24:12.604737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.693205Z","title":"Gptracker: A large- scale measurement of misused gpts,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.693205Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a15eb3b68c1efb9eb7c014f9be4a2aeb420711d2853f48392b572e1e7b602415","observation_id":"272dbafa-e30b-45c6-b97b-cd0103d94c07","resolution":{"observed_at":"2026-08-02T08:24:12.693205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.835931Z","title":"Malicious {LLM-Based}conversational{AI}makes users reveal personal information,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.835931Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:f4c3a4af1fa02900dae650f449b2b0b314356d73bdb9608d2d3c2ca2232f4c66","observation_id":"d9be00c8-5378-448e-8b30-f12fbf3da440","resolution":{"observed_at":"2026-08-02T08:24:12.835931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:12.973746Z","title":"On concepts and methods in horizon scanning: Lessons from initiating policy dialogues on emerging issues,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:12.973746Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:75031bd416072fe27762f051c836c57084850824a2bf5dff862f9234f1888b1c","observation_id":"de2d6ce3-49a2-4234-aeea-8dadfd71b763","resolution":{"observed_at":"2026-08-02T08:24:12.973746Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.114549Z","title":"Using affinity diagrams to evaluate interactive proto- types,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.114549Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:1d5a5aa50022dd9e7a4dda2c6c61adc7886cfe268c36c43c9f3743a4563c164b","observation_id":"8ddcf6bb-654a-4087-a7d4-3bd09fe3acfb","resolution":{"observed_at":"2026-08-02T08:24:13.114549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.229979Z","title":"Regulatory challenges of robotics: some guidelines for addressing legal and ethical issues,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.229979Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:d8f6175c0c1020bb48d3703222b935acde77d2d7c1cc2ce5fd8e69794801dc67","observation_id":"ab3fc126-e461-4067-bf7a-a42faa9f05d8","resolution":{"observed_at":"2026-08-02T08:24:13.229979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.351288Z","title":"Find the gap: Ai, responsible agency and vulnerability,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.351288Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:ebaa635590b5fbe5757c78fe68f56f0b683eea5601133d40382b2e577dcac269","observation_id":"c65ee07b-a66e-4102-834a-18a212de079d","resolution":{"observed_at":"2026-08-02T08:24:13.351288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.484541Z","title":"Harms from increasingly agentic algorithmic systems,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.484541Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:3aa69113752a707b5712499ab2b3bb0f9a731583b3992f418806f2e4a8058112","observation_id":"62425ab5-94a9-488f-a7c3-7744f6b461d7","resolution":{"observed_at":"2026-08-02T08:24:13.484541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.571390Z","title":"General data protection regulation,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.571390Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:df033d19e3cd17f0c2874c738bc76c92499adbd797886edff51437b4b9ae3f14","observation_id":"eabb3059-cac0-4107-8230-a2eeccd8b7c4","resolution":{"observed_at":"2026-08-02T08:24:13.571390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.694752Z","title":"Artificial Intelligence Act,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.694752Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a82b1257bf66060b0c6ef152b5bc7b4742a124b5a20fa5c9bc450c7c59a755fa","observation_id":"23336480-951f-4e21-8dd0-458a6b164663","resolution":{"observed_at":"2026-08-02T08:24:13.694752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:13.854753Z","title":"Charter of fundamental rights of the european union,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:13.854753Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:d88f4217896d6aac8cb2f61f24b30c20921138f52c2f1df5c5bfe486a6b04004","observation_id":"550f8f84-20d5-482a-a508-a78e3bed7dfb","resolution":{"observed_at":"2026-08-02T08:24:13.854753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.033832Z","title":"An objective metric for explainable AI: How and why to estimate the degree of explainability,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.033832Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:4450a935dd8bb1b672b189e16eb9b7e9fd43b4a3b9415d8e5b63c5b780be29e9","observation_id":"203e0c67-3b3f-4543-b3e5-c66d23fa0b6c","resolution":{"observed_at":"2026-08-02T08:24:14.033832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.146897Z","title":"Legal XAI: A systematic review and interdisciplinary mapping of XAI and EU law, towards a research agenda for legally responsible AI,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.146897Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:bc1cf3512060da54cbb0283967cf8feb0df37dc2674f2069e01a5fec3d1c130f","observation_id":"405dcb28-cd6e-415a-8550-2e50e80e29f6","resolution":{"observed_at":"2026-08-02T08:24:14.146897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.262708Z","title":"Understanding accountability in algorithmic supply chains,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.262708Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:40158df43dd13e55d539255caf79c66092154e385e263c41645d89370cb8794d","observation_id":"63e1ab6a-b89c-4346-b596-d795d72d5892","resolution":{"observed_at":"2026-08-02T08:24:14.262708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.372477Z","title":"Ai agents under eu law,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.372477Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:9b06fb53f66cd04c093bfbf80dbeafdb003f24fc810bce0bd7784fe3bebc22c7","observation_id":"ebf310ac-917f-4e73-9533-743abd092fa5","resolution":{"observed_at":"2026-08-02T08:24:14.372477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.519442Z","title":"Digital services act,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.519442Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:0acb9b73582f5f56c1f448e61f14ad51d6d4ed248534f35feb997bf3d55d4f0c","observation_id":"26d8882f-e671-4223-bea5-15b14d184ff2","resolution":{"observed_at":"2026-08-02T08:24:14.519442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.614384Z","title":"Medical device regulation,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.614384Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:b7f7e5fda3762b2d80bf6778879305ceb9fdce76f897066e5bb4710925aba124","observation_id":"db074f39-d769-40c0-be2e-363016d3f58d","resolution":{"observed_at":"2026-08-02T08:24:14.614384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.784154Z","title":"Product liability directive,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.784154Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:b41108c891790592eb6e7e72019a7c6261ec2f6cf4413a15cd95a5fbd55e904a","observation_id":"79d9321f-c799-47a3-8fc1-8326fd18ef35","resolution":{"observed_at":"2026-08-02T08:24:14.784154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.954752Z","title":"On the quest for effectiveness in human oversight: Interdisciplinary perspectives,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.954752Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:10dacfea418eeef7f24d54deabb77b066cbaa62f31ad6846a00a59eb3750a1b9","observation_id":"3b65430b-0001-4003-b7d3-a1ff72f12461","resolution":{"observed_at":"2026-08-02T08:24:14.954752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.017835Z","title":"Fostering appropriate reliance on large language models: The role of explanations, sources, and inconsistencies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.017835Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:2416a863917543139dc673891cd143925e3ecc4e8a2b789417207846bd3c7478","observation_id":"0dec2c73-6c5d-417f-8dc7-54a74dfdf11f","resolution":{"observed_at":"2026-08-02T08:24:15.017835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.875837Z","title":"Available: https://eur-lex.europa.eu/eli/dir/ 2024/2853/oj","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.875837Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:f20563f18ba98d55883aa3e0059cdc0839d9a4b62a4873bf299b4bee77e1bc4a","observation_id":"41687e65-cb54-4bf0-8347-ecdfbf8dd90f","resolution":{"observed_at":"2026-08-02T08:24:14.875837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.271343Z","title":"Software documentation issues unveiled,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.271343Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:7c9a9e4381dde2dfb94236ddf89eb3858e89b2fc31e2c9c5367b814ee8e7fd1e","observation_id":"b22d94ca-d792-4a84-a0ad-e8b586e4e0f8","resolution":{"observed_at":"2026-08-02T08:24:15.271343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.398837Z","title":"Detecting outdated code el- ement references in software repository documentation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.398837Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a6cdf4efc10f5f086217dbd8aea0a56d82e827b9a0aaf62385f8daa977a8f982","observation_id":"af1045dd-a08a-4245-840f-6d3d4a5fffaf","resolution":{"observed_at":"2026-08-02T08:24:15.398837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.123911Z","title":"Software documentation: The practitioners’ perspective,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.123911Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:0e71ce771584b8b61b19b0ad551f892013fc7bf7e3ed44cb5dbdb2929945b5d5","observation_id":"f181a372-973d-40e2-8326-d9b26c9ee709","resolution":{"observed_at":"2026-08-02T08:24:15.123911Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.642583Z","title":"Simplifying software compliance: AI technologies in drafting technical docu- mentation for the AI Act,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.642583Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:79fdee00cd417aceb4697be05834e9d44cb405fe611b2590da4d4215c7922f2d","observation_id":"ca12bbf5-cbe5-4d77-a350-a2219aaa3b46","resolution":{"observed_at":"2026-08-02T08:24:15.642583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.763285Z","title":"Outlining traceability: A principle for operationalizing accountability in computing systems,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.763285Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:b74a87e19561ac0ed97170b98524797460dfe46485a09c837f0d377672533f29","observation_id":"ccc0f3e7-e6b0-420a-8fdf-05fc12cbfe89","resolution":{"observed_at":"2026-08-02T08:24:15.763285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.521601Z","title":"An empirical study on compliance with ranking transparency in the software documenta- tion of EU online platforms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.521601Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:c55a8e81ffc7dcdbdc8525a7cdf05b08de8e07376b2022899c9458a10e571805","observation_id":"b65a15c8-c4d6-4759-a4e9-ee6b55139bb8","resolution":{"observed_at":"2026-08-02T08:24:15.521601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.987520Z","title":"Audit trails for accountability in large language models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.987520Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:2d31d37899fbf7a5a92948e68eb8a868f8c4530016633bbd1eb07baa60d8ad24","observation_id":"fce2f539-45cb-4898-bb5f-7b8f08bec32b","resolution":{"observed_at":"2026-08-02T08:24:15.987520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.155077Z","title":"Regulation (eu) 2024/1689 laying down harmonised rules on artificial intelligence,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.155077Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:e11adaf55794d3df11aec424192671567354be3eaacf5aab0ab9244bea5b1f26","observation_id":"1ca57d03-d778-4dfa-bd5a-f3730ea9a247","resolution":{"observed_at":"2026-08-02T08:24:16.155077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:15.872037Z","title":"Closing the ai accountability gap: Defining an end-to-end framework for internal algorithmic auditing,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:15.872037Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:ff243e21f5d6020687fb0308a75839893435e49ab093a076b6a852516ab5b44c","observation_id":"3e16cd78-1a3c-4500-be1e-876e9a71745f","resolution":{"observed_at":"2026-08-02T08:24:15.872037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.456976Z","title":"Regulation (eu) 2016/679: General data protection regulation,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.456976Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:60c3a02c16e693392a5fda2fc72acfcea8673112fdf2565472d149f8b9648ac5","observation_id":"4a9ac485-9564-4f90-b536-e878be52dce4","resolution":{"observed_at":"2026-08-02T08:24:16.456976Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.537057Z","title":"Regulation (eu) 2016/679: Article 32, security of pro- cessing,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.537057Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:02bf1932a8a4d7ac151d932b9861aa53a23d01decf8f05bca68852c678f95ab1","observation_id":"ddc9e2af-bfbb-4573-9bb1-5bf445ef6cbd","resolution":{"observed_at":"2026-08-02T08:24:16.537057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.324250Z","title":"Accountability capture: How record-keeping to support ai trans- parency and accountability (re)shapes algorithmic oversight,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.324250Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a5f01d8e0b98b9eec91501627eb5bfec9fa7221c78672ea1170852f75bed45b9","observation_id":"c04b95f5-c766-4703-b56d-e3fb2d34347e","resolution":{"observed_at":"2026-08-02T08:24:16.324250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.711739Z","title":"On cryptographic mechanisms for the selective dis- closure of verifiable credentials,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.711739Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:38fc46bd6cb7607f4cb4d8f824ec568065586680f9ece9eef77484a7986b40be","observation_id":"467d02a4-8ea7-4681-a953-d72d65ce0f08","resolution":{"observed_at":"2026-08-02T08:24:16.711739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.829885Z","title":"Role-based access controls,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.829885Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:cb46362a98235e1a1521027fa21bece4e4deeeb97bb69b233f46167f016e530f","observation_id":"ff454e39-92d6-4c71-bf55-7725babb7fd9","resolution":{"observed_at":"2026-08-02T08:24:16.829885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.593773Z","title":"Harpocrates: Privacy-preserving and immutable audit log for sensitive data operations,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.593773Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:7951c3c5d9fa34e87328ff4c6332eb845f509a86d8d43cb955902143c70c9c1a","observation_id":"d7c8ff70-6bd3-44c3-a85a-a93eb775438c","resolution":{"observed_at":"2026-08-02T08:24:16.593773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.211278Z","title":"Cognitive bias in decision-making with llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.211278Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:bbd6e783082d98ebb6f1e6519eb26e3d28ddb0f77a8f8703252b7549071c6289","observation_id":"85b471ea-de94-41ff-9e3a-d3cfe296c92c","resolution":{"observed_at":"2026-08-02T08:24:17.211278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.314480Z","title":"Towards understanding sycophancy in language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.314480Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:e7679f8ec05bfc9e3393d8f4c51705930443ecd10e4f426026aa179682f51c47","observation_id":"a7f3b7e4-dcae-486a-9333-7845c606fcbe","resolution":{"observed_at":"2026-08-02T08:24:17.314480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.415025Z","title":"Agentharm: A bench- mark for measuring harmfulness of llm agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.415025Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:7c6e4394186b9aef517dca8e755c97e214faeaba2065bdf97ca7e477778dcd8a","observation_id":"3352ce30-620b-464a-881c-36947d597a9f","resolution":{"observed_at":"2026-08-02T08:24:17.415025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.077587Z","title":"A framework for understanding sources of harm throughout the machine learning life cycle,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.077587Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:71ae77a62d8752b62329c7e3c3d4e1ad5bf11b0ae10c637c3c2d2b08de540b62","observation_id":"3441e8ee-0131-4016-a4bc-8ebd2528d221","resolution":{"observed_at":"2026-08-02T08:24:17.077587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.553539Z","title":"Is general-purpose ai reasoning sensitive to data- induced cognitive biases? dynamic benchmarking on typical soft- ware engineering dilemmas,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.553539Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:77da3a77e399b74e7398c3f28f8d6935d3706a569e0a2cdb9aafdfc9a4b86299","observation_id":"de386fe8-8204-445c-bdcc-2a77af6ddd9e","resolution":{"observed_at":"2026-08-02T08:24:17.553539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.626859Z","title":"Large language models for in-file vulnerability localization can be “lost in the end","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.626859Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:8103b3579039515aa728b173a375492aa6208b1e684e60573e7a5416a6f83ee5","observation_id":"6199d998-5ed0-4e00-9848-bd8f951c6adf","resolution":{"observed_at":"2026-08-02T08:24:17.626859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.704714Z","title":"Shostack,Threat Modeling: Designing for Security","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.704714Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:28ac6877cc0e8e317090ca62dd49a2d1ccaf4ec04e320d1750cb25c989af0f22","observation_id":"8bd15b13-0056-4abe-8cd5-af76c2810de9","resolution":{"observed_at":"2026-08-02T08:24:17.704714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.473543Z","title":"Mitigating prompt- induced cognitive biases in general-purpose ai for software engi- neering,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.473543Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:18e55578b6bf76a2a3fa6222a6efca4609a389f5664ad0fa162ac3f2602a6f5d","observation_id":"7d18f928-3ffb-4d16-9ada-d424d8fac82d","resolution":{"observed_at":"2026-08-02T08:24:17.473543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.932285Z","title":"STPA handbook,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.932285Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:12977e8cfa8bc482f7dd927f4035f4cf911e70348d76981d7360f595fa307402","observation_id":"1ac3788e-e469-44e7-be95-2e0a06db136f","resolution":{"observed_at":"2026-08-02T08:24:17.932285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.987733Z","title":"Huang and C","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.987733Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:35104050d5dd44bbecda6fc6cb9b97243be3d2bbd9e90625763e51e1a1a7b01d","observation_id":"70f8d566-30ca-41cf-a9c1-58bcc6b41c90","resolution":{"observed_at":"2026-08-02T08:24:17.987733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.042868Z","title":"Multi-agent risks from advanced AI,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.042868Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:5d02961d13dc93dd0947ba53da824bf74ccd7ec9543d490fdd2501e4af8dbe15","observation_id":"72696e31-3c3f-4342-98ba-bdadfa0313da","resolution":{"observed_at":"2026-08-02T08:24:18.042868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:17.812590Z","title":"Artificial intelligence risk management framework (AI RMF 1.0),","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:17.812590Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:5f8535d39361bb6759de42a783726ea8c5347b86fe221a066c550aa4add90a79","observation_id":"043e1671-a520-4499-aa05-90988dfbddc6","resolution":{"observed_at":"2026-08-02T08:24:17.812590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.165974Z","title":"m&m’s: A benchmark to evaluate tool-use for multi-step multi-modal tasks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.165974Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:51071c4ab59715280ce811c254512a43fc7e9fd417fc54cfdc9987bfd1ec9ede","observation_id":"dfdf76f2-d13a-44c3-8a2e-264041247105","resolution":{"observed_at":"2026-08-02T08:24:18.165974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.206661Z","title":"Are more LLM calls all you need? towards the scaling properties of compound AI systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.206661Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:df86fbb283d614c310b582bc6de7bfbf235bb4da248595b3aa562ae8c24f37c7","observation_id":"e180c359-834c-4793-889e-2b8c12a00522","resolution":{"observed_at":"2026-08-02T08:24:18.206661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.318130Z","title":"Facilitating threat modeling by leveraging large language models,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.318130Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:2628e9795d18e0970eb566631df53713c5a6a94a23d989eb5bb812f94fdd0b7c","observation_id":"4f2b3305-5867-423d-9ef4-146ad22cc329","resolution":{"observed_at":"2026-08-02T08:24:18.318130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.104817Z","title":"Why do multi-agent LLM systems fail?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.104817Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:212a5ef4ff5d17402018e7094fcfbad7eef353ce19919deac6b017f9afbaa5a1","observation_id":"1ff73adf-5d6e-4411-8889-7263f67eb66e","resolution":{"observed_at":"2026-08-02T08:24:18.104817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.660546Z","title":"Dignum,Responsible Artificial Intelligence: How to Develop and Use AI in a Responsible Way","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.660546Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:5878a194fe47c47a7909c699be1b38a664e740a42a8a5bb46a6f19ab2f611fc6","observation_id":"feb12240-63e9-48a7-bf89-e27996a50d7a","resolution":{"observed_at":"2026-08-02T08:24:18.660546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.753616Z","title":"What to account for when accounting for algo- rithms: A systematic literature review on algorithmic accountabil- ity,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.753616Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:7316c4850384e2d9f11d7e6a00df0acd0d13ca0d4336143f4dae6ec6d9ce5af4","observation_id":"d9be8cad-3590-484a-8f27-bba12908f724","resolution":{"observed_at":"2026-08-02T08:24:18.753616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.849780Z","title":"Accountability in multi-agent organizations: From conceptual design to agent programming,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.849780Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:81670ac7cb2fa068a1d3dbcd0e22ccac2cd3cbd21591dabd140bfadd3e08630d","observation_id":"22295832-3b63-4079-a5d8-f7112698cf70","resolution":{"observed_at":"2026-08-02T08:24:18.849780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.411345Z","title":"Available: https://www.ndss-symposium.org/ wp-content/uploads/aiscc2024-16-paper.pdf","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.411345Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:eb59d8b029a5cd28b1ef74c7ac460bafacea4ea85658f27debef404679d969ae","observation_id":"38289ff6-9814-440c-b050-64960fe69758","resolution":{"observed_at":"2026-08-02T08:24:18.411345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.562275Z","title":"Measuring progress on scalable oversight for large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.562275Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:ae14a3ff1c70004ea04382a35fb36e327d398b485a7f80478f7dd62fa09cd648","observation_id":"760c8a86-52e7-4124-aba8-a943adb5f665","resolution":{"observed_at":"2026-08-02T08:24:18.562275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.196003Z","title":"Value sensitive design and information systems,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.196003Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:56b9c23ee9d57cfac55ae1af1ca159bba28712573b40c15c18ac35dd3df935a9","observation_id":"d0859889-9bba-46aa-9a11-dd160e8f5e1e","resolution":{"observed_at":"2026-08-02T08:24:19.196003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.277582Z","title":"Fairness and abstraction in sociotechnical systems,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.277582Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:06d7cd6023992d8ffe2ca4edc40f1c1dca168816deeba753718dfdc0d4dbb4a5","observation_id":"36746abd-d58b-49f0-b481-007cddcdffda","resolution":{"observed_at":"2026-08-02T08:24:19.277582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.337789Z","title":"Inherent trade- offs in the fair determination of risk scores,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.337789Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a990d30ea442077575098c5813c95bf9aaa8840b2cdea809dd4c4c9c45d8ecbf","observation_id":"54f26b29-3572-4dda-809e-723ef582f124","resolution":{"observed_at":"2026-08-02T08:24:19.337789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:18.978283Z","title":"AI safety via debate,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:18.978283Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:b5f292024e6634c67c524bf14be3f8c2b3fc49c45c24e7404be39ae458bbff1e","observation_id":"77a8f55c-385f-4d8c-abcc-93d659905f82","resolution":{"observed_at":"2026-08-02T08:24:18.978283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.121973Z","title":"Improving factuality and reasoning in language models through multiagent debate,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.121973Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:aa29e9bac4962eac768ae10ded7043bacc10490b14ecb2a2a42446fa6b51f66c","observation_id":"8244c8de-9e37-4be6-a4c7-7f80fe5449f8","resolution":{"observed_at":"2026-08-02T08:24:19.121973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.549819Z","title":"Training language models to follow instructions with human feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.549819Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:18daadc6083e7cbc4042481a4c8ad8fa2167f8f6b5af86f1f5e018e6d94b41c2","observation_id":"05d88dae-0f8e-400a-aa7a-594c6798c801","resolution":{"observed_at":"2026-08-02T08:24:19.549819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.617858Z","title":"Constitutional AI: Harmlessness from AI feedback,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.617858Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:430a3f01c05e549bc7f7009352b7b0d5bf52a44d1338a53d9730b0e7aa91a5fa","observation_id":"18613d3f-316d-4d40-8fd5-bf51dde7565f","resolution":{"observed_at":"2026-08-02T08:24:19.617858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.700510Z","title":"Jailbroken: How does LLM safety training fail?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.700510Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:1f6d5692822ab3a7998593e583da027d355770b18dc2489f06ee1e809f9e9e26","observation_id":"29fe983d-2a27-4c80-b882-0d8b662b9cfe","resolution":{"observed_at":"2026-08-02T08:24:19.700510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.399420Z","title":"Big data’s disparate impact,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.399420Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:174e5925c6b0d2046b4085b7de36aa482ee35d5c19d57b52e3b2bd3202795c69","observation_id":"d7c0346f-9691-4222-a6d6-19b6b3942c1b","resolution":{"observed_at":"2026-08-02T08:24:19.399420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.472889Z","title":"The (im) possibility of fairness: Different value systems require differ- ent mechanisms for fair decision making,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.472889Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:12a9b487275ce8815218c20ed9f8c4d34e4cf19684233e1bed7152c074855b33","observation_id":"12125bf0-9dba-4b1c-ab41-c065a9431b27","resolution":{"observed_at":"2026-08-02T08:24:19.472889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.946162Z","title":"Can global XAI methods reveal injected behaviours in LLMs? SHAP vs. rule extraction vs. RuleSHAP,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.946162Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:058eaf2a3b565221935d5b3f2f9a7bd596b69701e96f07fb991f433b521a09d7","observation_id":"186c8815-66fc-478e-88b0-639feb8be2fc","resolution":{"observed_at":"2026-08-02T08:24:19.946162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.028400Z","title":"Neuron-anchored rule extraction for large language models via contrastive hierarchi- cal ablation,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.028400Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a0b078dde11eb189d7e7803429076ccf074ff33315ebbca1ca8157af09c9810f","observation_id":"b4bcb82b-e078-424b-ae4d-a33e0e6ea02c","resolution":{"observed_at":"2026-08-02T08:24:20.028400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.069184Z","title":"Illocutionary explanation planning for source-faithful explanations in retrieval-augmented language models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.069184Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:1686035fdc9e4b3fd9dcbc0f58f3c3ef78ba98624af2c1ba9173f4a46293e14d","observation_id":"23c0a405-f6aa-4770-8849-a12577b99846","resolution":{"observed_at":"2026-08-02T08:24:20.069184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:19.791715Z","title":"Universal and transferable adversarial attacks on aligned language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.791715Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:b3d8a7bcbacea54d92c9c76e83a69f07f6157c8fdf04c3dfcba857b7e1731654","observation_id":"2f93e56b-6b6e-4e99-8c92-32565b33655f","resolution":{"observed_at":"2026-08-02T08:24:19.791715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.02153","last_updated":"2025-09-15T22:15:00Z","snapshot_observed_at":"2026-08-12T13:48:47.535846Z","submitted_at":"2025-06-02T18:35:16Z","title":"Small Language Models are the Future of Agentic AI","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.02153","snapshot_observed_at":"2026-08-02T08:24:19.868406Z","title":"Small language models are the future of agentic ai,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:19.868406Z"},"links":{"cited_paper":"/paper/2506.02153","citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:26042e2a88271110d9fa124a1f174fc94aef3b2fef5b89694889ae8d33f9275a","observation_id":"a637056e-ba5e-4776-8a8e-a1b95a6077f0","resolution":{"observed_at":"2026-08-02T08:24:19.868406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.273319Z","title":"Large language mod- els can strategically deceive their users when put under pressure,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.273319Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:48de95cf4dd7dca7968af0915cb2a0df74ce95f5c4be36c3bc4055041058a187","observation_id":"b7e22035-521d-40ad-8367-8712839b64e3","resolution":{"observed_at":"2026-08-02T08:24:20.273319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.330630Z","title":"Sleeper agents: Training deceptive LLMs that per- sist through safety training,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.330630Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:ee5c0f8d749a5a3f9f1633426cbb877eee8e1abc5caf0891ae6746fe5f5cf5e4","observation_id":"ee6099b3-4fe6-4b59-9e60-6dcfc3621a77","resolution":{"observed_at":"2026-08-02T08:24:20.330630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.398914Z","title":"AI, big data, and the future of consent,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.398914Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:125bcc335b5d2c09057da30db6ccf1b941ccffc8655cadfdb3a8d4b348428a7d","observation_id":"d3829fb4-3eb6-497c-9cfa-4d4d59ac38d4","resolution":{"observed_at":"2026-08-02T08:24:20.398914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.101639Z","title":"Assessing model-agnostic XAI methods against EU AI Act explainability requirements,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.101639Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:632af7ad22b49e48a5551f147589bf836e307857a247f820f6e0ae265ab16fc1","observation_id":"c80b1ea8-a28a-40cc-89e4-2f6e072aba74","resolution":{"observed_at":"2026-08-02T08:24:20.101639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.191433Z","title":"AI deception: A survey of examples, risks, and potential solu- tions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.191433Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:3ba6ffa99f566ffb23fd175ffe8804743085d3d30401edb069d383405fb05826","observation_id":"77f5b34a-e9e3-4cd1-b5d1-5f9869603ffe","resolution":{"observed_at":"2026-08-02T08:24:20.191433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.638201Z","title":"Elvira: An explainable agent for value and utility-driven multiuser privacy,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.638201Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:5c830192f64016bf16245b62e81e2f64a07a689ae3f68c351a35fd6bc4994221","observation_id":"6844195f-58d0-416d-bbe4-653e87155d12","resolution":{"observed_at":"2026-08-02T08:24:20.638201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.799690Z","title":"“I know even if you don’t tell me","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.799690Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:241172561f02814edef80eb19ed18ae294605b5ee935f439716e19dd6136e4a3","observation_id":"19ac1045-fbc7-4286-b3f1-32c57416e6ba","resolution":{"observed_at":"2026-08-02T08:24:20.799690Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.901032Z","title":"A survey of privacy in multi-agent systems,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.901032Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:78c982634826ce0019336fc99b33518b6c517aa248b61893d716039e702eba43","observation_id":"dde9afb6-aa25-40d8-8b3c-98c4c2c2ac05","resolution":{"observed_at":"2026-08-02T08:24:20.901032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.480729Z","title":"AgentSCOPE: Evaluating contextual privacy across agentic workflows,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.480729Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:57c04e2f084d1de9329efcfb1c4a1197f0099ec7c1ce3b0b5acdcf7224192f26","observation_id":"a8a97923-3195-4913-bbe5-d63671ae1719","resolution":{"observed_at":"2026-08-02T08:24:20.480729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:20.532620Z","title":"Privacy-enhanced personal assistants based on dialogues and case similarity,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:20.532620Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:7ccec511a37dc3f92cab923620799b570629cca9d3160238cc38c7df6c7a6320","observation_id":"d4f56df3-a999-45a0-922b-8f3465311fec","resolution":{"observed_at":"2026-08-02T08:24:20.532620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.179705Z","title":"Privacylens: Evaluating privacy norm awareness of language models in action,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.179705Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:30e09cf3907e9b6df6f0cf94d4a03eca834818a7756ef442b507d6aa172882c6","observation_id":"2e805f6a-cb7b-452f-9265-c0363461dad6","resolution":{"observed_at":"2026-08-02T08:24:21.179705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.268615Z","title":"Agentic ai: Autonomous intelligence for complex goals—a comprehensive survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.268615Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:462dc4b25fbe49642cf2d174e92b95a5dbde1a0de91c4e02f32189631590f1b3","observation_id":"695cbb69-15e8-42e6-aa6f-41a3392e90fb","resolution":{"observed_at":"2026-08-02T08:24:21.268615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.374044Z","title":"Large language models must be taught to know what they don’t know,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.374044Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:505f620f97f162d39ff3ee0917dbd81b2e93a491ceb9f73fc99a089547a36ba8","observation_id":"282fd760-a4f0-482d-bc88-29e8612d1872","resolution":{"observed_at":"2026-08-02T08:24:21.374044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.011060Z","title":"Privacy and autonomous systems,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.011060Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:01fe3503d63fd203e360ca735239e1ea0a09198fd1f122dfd0a21c310ae85b8d","observation_id":"a70a58e1-41b4-48f9-bb9b-a86eff3c43d4","resolution":{"observed_at":"2026-08-02T08:24:21.011060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.081564Z","title":"Privacy as contextual integrity,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.081564Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:e27ee7045b8fe59ebd59412a01e26f56a6472cfa602a91ab1365331ae89326bd","observation_id":"1677f068-2ec1-4d0f-b821-34485a603785","resolution":{"observed_at":"2026-08-02T08:24:21.081564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.682365Z","title":"Intersectional experiences of unfair treatment caused by automated computational systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.682365Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:a4fa82d6eda00f3647766fdffe35b10b944f73078d59643adf02eeb9d1895aa3","observation_id":"9db9783a-9eab-4224-823a-453a0435baeb","resolution":{"observed_at":"2026-08-02T08:24:21.682365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.849591Z","title":"Bias and discrimination in ai: a cross-disciplinary perspective,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.849591Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:ef84e9f6127f4b510077e560d67bc1a7183d2c8ac9026fdaf74b656204e7a8aa","observation_id":"dc55a6b3-3d2f-4923-93df-8bf2214fa648","resolution":{"observed_at":"2026-08-02T08:24:21.849591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.993883Z","title":"Online manipulation: Hidden influences in a digital world,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.993883Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:24b128b406b0791316598d0eaceb06a6576ad7a7b87a07b537abf0ac32372620","observation_id":"965dbf22-6d53-44ca-9b43-c586e24a3e92","resolution":{"observed_at":"2026-08-02T08:24:21.993883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.474942Z","title":"Privacy in human-ai romantic relationships: Concerns, boundaries, and agency,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.474942Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:6c3bed96fd6565015813dc432a77de2e63c97c45d295c2046ee0f6ecd6d0e40f","observation_id":"f913b0cc-6b83-4396-ab76-ecdb735c7cd0","resolution":{"observed_at":"2026-08-02T08:24:21.474942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:21.572173Z","title":"Toward a field of intersectionality studies: Theory, applications, and praxis,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:21.572173Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:c8e32386ffd16a6c0e2efdbe5891b95c4631f56943a118ad83bb09759aebac7a","observation_id":"5ab686e7-a23f-45e2-8386-36f53ab7b1bc","resolution":{"observed_at":"2026-08-02T08:24:21.572173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:22.258850Z","title":null,"venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:22.258850Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:fc6078a201c25ed9af3d594241852cbbbfcc5b4ad415cf729f1ae63a0e184441","observation_id":"8b97a9dc-d73c-44ab-a6be-5fefc5fdcd05","resolution":{"observed_at":"2026-08-02T08:24:22.258850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:22.375901Z","title":"Qwen3.5: Accelerating productivity with native multimodal agents,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:22.375901Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:489cca6524ebeac0d230cf079fc1334ac60cdcea583cca690194566979364e18","observation_id":"e06aaa01-fe52-42ee-9854-7435fd2363af","resolution":{"observed_at":"2026-08-02T08:24:22.375901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:16.955281Z","title":"Available: https://csrc.nist.gov/pubs/conference/ 1992/10/13/rolebased-access-controls/final","venue":null,"work_id":null,"year":1992},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":1992,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:16.955281Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:95fa19f13bc3787ae04ec1be72aaaaaa70ae45332f08f79ba8e7fcb152417e29","observation_id":"63a0ea68-d221-44e1-868d-f891db2e7bac","resolution":{"observed_at":"2026-08-02T08:24:16.955281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:14.721646Z","title":"Available: https://eur-lex.europa.eu/eli/reg/ 2017/745/oj","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:14.721646Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:211010d55242660052a3837c6094b23a1edc4ac6ffb96b3104c76ff2efc43585","observation_id":"5f479da6-3954-4e37-92eb-55b2c20d9856","resolution":{"observed_at":"2026-08-02T08:24:14.721646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T08:24:22.088210Z","title":"Available: https://georgetownlawtechreview","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions","version":2},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-02T08:24:22.088210Z"},"links":{"citing_paper":"/paper/2607.06608"},"observation_digest":"sha256:f38e2d0d5fd2699d126beef1d491d744834064b036de88694267aae9881916b0","observation_id":"ab5dcd6f-7b8d-47b0-b5e1-2a6881b584bd","resolution":{"observed_at":"2026-08-02T08:24:22.088210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.06608","last_updated":"2026-07-28T01:46:03Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T00:09:30.626570Z","submitted_at":"2026-07-07T05:45:29Z","title":"Security and Privacy in Agentic AI: Grand Challenges and Future Directions"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":100,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":101},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 100 of 101 outbound references and 0 inbound Pith citation observations for arXiv:2607.06608."}