{"as_of":"2026-08-07T13:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:834eb2c382b79a0a8068425f734ba7f6f14a9461240e2846eaf0190b51dd5fc5","coverage":[{"denominator":19,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":19,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-09T20:14:36.433937Z","state":"measured"},{"denominator":20,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":20,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T00:48:48.474079Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-05T00:48:50.245389Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"cited_work":{"arxiv_id":"2607.07097","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.07097","snapshot_observed_at":"2026-08-05T00:48:50.245389Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","venue":"cs.AI","work_id":"9ca2a8d1-32e2-4e3d-96fd-c2e0759afa59","year":2026},"citing_paper":{"arxiv_id":"2608.02665","last_updated":"2026-08-01T22:28:31Z","snapshot_observed_at":"2026-08-07T12:26:05.269300Z","submitted_at":"2026-08-01T22:28:31Z","title":"Single Canonical Prompts Underestimate LLM Safety's Surface-Form Sensitivity","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-05T00:48:48.474079Z"},"links":{"cited_paper":"/paper/2607.07097","citing_paper":"/paper/2608.02665"},"observation_digest":"sha256:f2be1611a95afb23a2983c52154a8533434ed71063dbc3deac79816d7543122e","observation_id":"c1131312-66ab-401b-9424-f9a97a5eef6b","resolution":{"observed_at":"2026-08-05T00:48:50.397734Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2607.07097/citation-record","integrity":"/paper/2607.07097/integrity","json":"/paper/2607.07097/citation-record.json","paper":"/paper/2607.07097"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.17634","last_updated":"2026-05-17T19:55:39Z","snapshot_observed_at":"2026-08-06T17:10:02.723847Z","submitted_at":"2026-05-17T19:55:39Z","title":"AI Agents May Always Fall for Prompt Injections","version":1},"cited_work":{"arxiv_id":"2605.17634","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.17634","snapshot_observed_at":"2026-07-11T02:47:50.686848Z","title":"AI Agents May Always Fall for Prompt Injections","venue":"cs.CR","work_id":"1ba07afc-ef9c-418c-99a2-bcf909fe2651","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.17634","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:6a9b5c7a024da03eb9a40e035e5c964ad7aa02f30a7da4826776fc219ccdd533","observation_id":"d5a08844-f89b-4b88-bcb5-89dfcd4a8862","resolution":{"observed_at":"2026-07-09T20:16:29.346583Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":"2410.09024","doi":"10.48550/arxiv.2410.09024","metadata_source":"pith","pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","venue":"cs.LG","work_id":"788aad10-421f-48d7-886c-792665914606","year":2024},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:86a8b3db7facee1f90ffe5e0f70bed3170f912bff94c0e0df40a4af224201db5","observation_id":"7d8c4b92-7e83-4dcb-9388-3c5b5b430ab4","resolution":{"observed_at":"2026-07-09T20:16:29.364433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":"2604.23374","doi":"10.48550/arxiv.2604.23374","metadata_source":"pith","pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","venue":"cs.CR","work_id":"8010c538-559e-41c9-940f-4c2d0ca50745","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:6154699c96b2913cf5eafff3aa949a5c93c09173bfb8469c784b791ca3be3fd6","observation_id":"cda030a0-21b3-4a28-a10a-6c020d083e63","resolution":{"observed_at":"2026-07-09T20:16:29.363975Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.595777Z","title":null,"venue":null,"work_id":"5bfa648b-e02b-4056-9ec8-972900beaeb3","year":2024},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:eba8d9ff6683066f508e701893b4d541eb973161331c7c81e5ac094130a6f94c","observation_id":"937a402d-e2ae-4931-a38a-7d1b135bacfc","resolution":{"observed_at":"2026-07-09T20:16:29.597201Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.597800Z","title":null,"venue":null,"work_id":"45aa1d59-89db-4d97-a861-9889e3b9ec56","year":2023},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:f285dd5a6b84563ced574107dbbf1d431d505ce6bb561901b88f703b594f3ba6","observation_id":"181f2525-ba32-4d6c-9d3c-b84d3607a71d","resolution":{"observed_at":"2026-07-09T20:16:29.599145Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.599786Z","title":null,"venue":null,"work_id":"f647b1cc-4cca-48a5-8919-687952c898ea","year":null},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:c1b9e3f4024e80ba8d62c12e63db4a8e2207857547598f74973c9770f62e96f4","observation_id":"620cf7e8-a5dd-4269-8d0b-9440d915984d","resolution":{"observed_at":"2026-07-09T20:16:29.601267Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.26542","last_updated":"2026-07-01T06:30:43Z","snapshot_observed_at":"2026-07-06T23:36:25.432687Z","submitted_at":"2026-05-26T04:44:59Z","title":"ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation","version":4},"cited_work":{"arxiv_id":"2605.26542","doi":"10.48550/arxiv.2605.26542","metadata_source":"pith","pith_arxiv_id":"2605.26542","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation","venue":"cs.CR","work_id":"69ed18ea-b909-4264-8a74-0bfc5bbe8c94","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.26542","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:f1944c3f73a961324a2f163adb2d8f49df470569d570e96803e2e4fe8b60764e","observation_id":"5295bdfa-6893-47ce-8f11-a45cb9dbb51e","resolution":{"observed_at":"2026-07-09T20:16:29.113708Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11514","last_updated":"2026-05-12T04:35:57Z","snapshot_observed_at":"2026-07-06T23:23:21.034839Z","submitted_at":"2026-05-12T04:35:57Z","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","version":1},"cited_work":{"arxiv_id":"2605.11514","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.11514","snapshot_observed_at":"2026-07-09T20:16:29.360130Z","title":"FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems","venue":"cs.CR","work_id":"83942ee3-03d6-4a8b-861a-8d91358ba83f","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.11514","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:109438843be8e4b4b6190ee898f4e040ba34c36ecfe99e25431fc4ea0f8312c8","observation_id":"4fdfb801-e33b-44d1-8a30-1c7c404c6609","resolution":{"observed_at":"2026-07-09T20:16:29.361643Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-07-06T23:22:28.318343Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":"2605.10481","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.10481","snapshot_observed_at":"2026-07-09T20:16:29.368662Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","venue":"cs.MA","work_id":"6532bd7f-cd22-40d4-bf3d-07abcf292038","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.10481","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:644acb607d1983ca113d12d6474b6729ca4dfb941c2534376b7fb3477b0323c6","observation_id":"d7591de6-7328-462e-a7f6-6d926dff32be","resolution":{"observed_at":"2026-07-09T20:16:29.369931Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.17480","last_updated":"2026-05-19T04:43:36Z","snapshot_observed_at":"2026-07-06T23:28:30.942078Z","submitted_at":"2026-05-17T14:42:44Z","title":"The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure","version":2},"cited_work":{"arxiv_id":"2605.17480","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.17480","snapshot_observed_at":"2026-07-09T20:16:29.353925Z","title":"The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure","venue":"cs.AI","work_id":"455759ee-bcd6-4ca6-864e-948ff4250748","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.17480","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:140a92673c5885392937263b5cac61ec0fbf08afa60d5695c8e45b0584af7cde","observation_id":"7aaf65b2-bd64-4174-8605-f8bd8056bea7","resolution":{"observed_at":"2026-07-09T20:16:29.355275Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.08647","last_updated":"2026-05-09T03:35:09Z","snapshot_observed_at":"2026-07-06T23:20:52.521341Z","submitted_at":"2026-05-09T03:35:09Z","title":"AgentCollabBench: Diagnosing When Good Agents Make Bad Collaborators","version":1},"cited_work":{"arxiv_id":"2605.08647","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.08647","snapshot_observed_at":"2026-07-09T20:16:29.356741Z","title":"AgentCollabBench: Diagnosing When Good Agents Make Bad Collaborators","venue":"cs.CL","work_id":"82d11c60-475f-4326-812d-b2b74babc96c","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.08647","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:93110163fe91238805f0e2ca26e7c57c21b7ff183b210441aa72f3ad7df7e613","observation_id":"6ecf1f90-76c9-41b4-9b61-1be4aa347cb7","resolution":{"observed_at":"2026-07-09T20:16:29.358011Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.600113Z","title":"Myers and Barbara Liskov","venue":null,"work_id":"655cb859-ef8e-4dc2-8017-ac80c54fb52b","year":1997},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:7904dd4840008b2baa630ba05f1f7ca1d91350271573240e8dce37a49e8d2944","observation_id":"1d81b9a7-ab62-4284-825c-935ee6e6ef6e","resolution":{"observed_at":"2026-07-09T20:16:29.601461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16489","last_updated":"2025-04-23T08:01:50Z","snapshot_observed_at":"2026-08-06T23:49:47.537087Z","submitted_at":"2025-04-23T08:01:50Z","title":"Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate","version":1},"cited_work":{"arxiv_id":"2504.16489","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.16489","snapshot_observed_at":"2026-07-09T20:16:29.368869Z","title":"Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate","venue":"cs.CR","work_id":"936bedab-f7e6-4fd1-8084-6086f8f6339d","year":2025},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2504.16489","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:1cd73c96ffac326edf405b89ea23f83330cf99eb22c660ec40809e88343e245e","observation_id":"b333286c-8d15-4c2a-9d2a-70e8cd1e3269","resolution":{"observed_at":"2026-07-09T20:16:29.370107Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.12188","last_updated":"2025-09-12T19:53:17Z","snapshot_observed_at":"2026-08-07T11:12:50.476452Z","submitted_at":"2025-03-15T16:16:08Z","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","version":2},"cited_work":{"arxiv_id":"2503.12188","doi":"10.48550/arxiv.2503.12188","metadata_source":"pith","pith_arxiv_id":"2503.12188","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Lei Wang, Jingsen Zhang, Hao Yang, Zhi-Yuan Chen, Jiakai Tang, Zeyu Zhang, Xu Chen, Yankai Lin, Hao Sun, Ruihua Song, and 1 others","venue":"cs.CR","work_id":"4b6792e0-3106-45e4-9b98-fbb6884a7a1a","year":2025},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2503.12188","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:0a37b8b0330bc73016cf07d1aea0c534a2612c67a03196408e44fddf9dab057c","observation_id":"dedaafb1-0aa6-45b0-97d2-3ca92045901b","resolution":{"observed_at":"2026-07-09T20:16:29.367118Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.602101Z","title":null,"venue":null,"work_id":"99340454-8ad7-4bf0-9cc8-4f5a051701d6","year":null},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:e3c94440d7a1c47da22a49646e48568ffaf758cf16c2a997d56dbfe8caff98ef","observation_id":"c34485e8-ee54-4313-90d5-1a7ccb6e0e04","resolution":{"observed_at":"2026-07-09T20:16:29.603507Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03378","last_updated":"2026-07-08T15:04:28Z","snapshot_observed_at":"2026-08-02T02:34:38.609069Z","submitted_at":"2026-05-05T05:37:00Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","version":2},"cited_work":{"arxiv_id":"2605.03378","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.03378","snapshot_observed_at":"2026-07-11T02:47:49.658880Z","title":"ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection","venue":"cs.CR","work_id":"221ce0bf-3316-409b-93c5-9094844e2372","year":2026},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2605.03378","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:1b3c2d1ed990316023f30bc4ae3200e538cb51745f57ab547a69a1cf85d756d4","observation_id":"f24cb5c8-7d5d-4dde-abf6-a1448b393c7f","resolution":{"observed_at":"2026-07-09T20:16:29.353112Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.605772Z","title":null,"venue":null,"work_id":"878f8a08-8497-4a4f-9531-4b4ea6552a7f","year":2024},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:1243e62b0e4e67a93d1b66ad2d34972a165722cabe6af7084d2c39c0e7121943","observation_id":"93a4c750-a259-42b6-9444-b296f6e8d307","resolution":{"observed_at":"2026-07-09T20:16:29.607262Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T20:16:29.604078Z","title":null,"venue":null,"work_id":"c6cdde5d-6305-4b9d-a044-9d74debdddcd","year":null},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:515ee18089d1632135039ff8a3b683d9fdf886eb1b9d4085fe2abb5dc6c829ae","observation_id":"f2b3d2c1-0687-416e-a32a-34bc5457cb83","resolution":{"observed_at":"2026-07-09T20:16:29.605438Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.20526","last_updated":"2025-07-28T05:13:04Z","snapshot_observed_at":"2026-08-06T13:29:20.255900Z","submitted_at":"2025-07-28T05:13:04Z","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","version":1},"cited_work":{"arxiv_id":"2507.20526","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.20526","snapshot_observed_at":"2026-07-09T20:16:29.371056Z","title":"Security challenges in ai agent deployment: Insights from a large scale public competition","venue":"cs.AI","work_id":"67bad570-dc1a-499c-a3ec-5d3fd8fd2677","year":2025},"citing_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-09T20:14:36.433937Z"},"links":{"cited_paper":"/paper/2507.20526","citing_paper":"/paper/2607.07097"},"observation_digest":"sha256:1b01420044e1009f2f62aeaff1ed53aa0071099e4291f010df09d24a0de26faa","observation_id":"cd95b6ca-93a4-4171-a9fa-3a20fc84a7db","resolution":{"observed_at":"2026-07-09T20:16:29.372532Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-06T17:09:32.541276Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety"},"reference_resolution":{"displayed":19,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":12,"verified_fuzzy":1},"total_outbound_references":19},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 19 of 19 outbound references and 1 inbound Pith citation observation for arXiv:2607.07097."}