Pith. sign in

Paper Citation Record · LEDGER

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents

As of 20 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 0 inbound Pith citation observations for arXiv:2607.08395.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.08395 v1

Coverage vector

measured 46 of 46 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-10T08:08:21.077290Z

measured 46 of 46 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

46 of 46 outbound references displayed

  • verified exact8
  • verified fuzzy16
  • unresolved2
  • parse uncertain3
  • malformed identifier0
  • metadata mismatch17

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation e6ff9423-36de-467c-aa3e-927d60eeab20 · outbound

This paper cites Aho and Jeffrey D.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Aho and Jeffrey D

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.504710Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:9fa74fd7d12a1e12699cc5f3db9a34aa2ea784a657cd7ff4f58b6474f18b4f20

Observation 2f51def9-93c5-414b-b32f-55393c1a6791 · outbound

This paper cites an unresolved cited work.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-07-10T08:16:59.481808Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:3fbe5ad2fa0d594c4add778ce0cb4d25291803ded3f83fc4025e766d7f644315

Observation ded25281-05bc-4c49-9945-8acda74d7277 · outbound

This paper cites Chandra and Dexter C.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Chandra and Dexter C

Reference 3

Resolution
verified exact
arxiv_id, observed 2026-07-10T08:16:58.750621Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:a913d0d91a7fdf264204aabfe660ff32150b7bc43ddef4866396af182a4117c9

Observation d4745412-3b17-46a6-b353-588e525b16d3 · outbound

This paper cites Scalable training of.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Scalable training of

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.485506Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:ea73b0184ed1de8866006913fe0e6de6ba2b61266eec32adbcde0d7dda6c3ce8

Observation 27d94936-333e-4db6-9e0c-cd87cdd3bc59 · outbound

This paper cites an unresolved cited work.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work

Reference 5

Resolution
unresolved
raw_fallback, observed 2026-07-10T08:16:59.487284Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:c51987d0334ecb7d9671d5f6403e9cdc81d6b12cad46aa1a7344f86fbcf9904f

Observation f8aa2823-63fa-4362-90a0-244f608d4399 · outbound

This paper cites Tetreault , title =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Tetreault , title =

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.489139Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:47285e892ecbee36944ffd1d3bbabb2b8722e021f8a81bba7ffdc32ae67420d6

Observation 047cce80-0f3b-482c-b597-45704162b827 · outbound

This paper cites A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , Volume =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , Volume =

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.483762Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:66f51fd3e2ff340a8c38aa4035fa40424433d8c2edc0f3d00f6ae3f9e5c3af69

Observation 212ad4b6-71d5-4adc-873f-fc770a77d76b · outbound

This paper cites Identifying the Risks of LM Agents with an LM-Emulated Sandbox.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Identifying the Risks of LM Agents with an LM-Emulated Sandbox

Reference 8

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.820459Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:2f4e8e7257240f6fcd53f2a089708f37a64f8571fe1acb30e7dd7d59a9c0a294

Observation 87723374-d6fc-4cbb-8890-dbf9b39153ba · outbound

This paper cites 2024 , eprint =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2024 , eprint =

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.494381Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:12e38006a2d67eddd2622677de4ffd27defefc9490c50d03c8e0a8d4ebcafde0

Observation a9298767-e182-4f4e-9cfa-461130500f4c · outbound

This paper cites AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents

Reference 10

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.802131Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:650fa7d8c821b9e6aa9f5e482bd5c27adfebb0fb8f3b46dbf3da9209ea5d7748

Observation 35361c3d-507e-4b66-9ff5-9a6b72856d28 · outbound

This paper cites Agent-SafetyBench: Evaluating the Safety of LLM Agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Agent-SafetyBench: Evaluating the Safety of LLM Agents

Reference 11

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.826196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:1f2ae728e9982c34b1d012731a7a18789f4ebfe932dd117d546529fe473093fe

Observation 2e336d02-53eb-4e4d-9b4a-baf42fdeee37 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 12

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.842522Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:7db3cc74aaedd23de622062e2183fd0c17f6d7062bc29bca57f80f04d1b18ad7

Observation 93c5e2e3-aec8-47d6-abf0-e26a4782052f · outbound

This paper cites and Pinto, Jeremy and Khan, Anaum and Bouchard, Louis-Fran.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents and Pinto, Jeremy and Khan, Anaum and Bouchard, Louis-Fran

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.501358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:b64b4f3a2317a1be59bc5b2cb7fd6facac74874f293456af9ba0dd16dcd44707

Observation de04a218-7489-443c-b873-1295874f59fb · outbound

This paper cites 2023 , eprint =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , eprint =

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.475079Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:90d5003f57ff20c9000fe51add9a52bbd187e95fd1e981d893fdc7720cdce6a3

Observation edc79d56-99de-4c69-826c-e5293eb9ed9c · outbound

This paper cites 2024 , archivePrefix =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2024 , archivePrefix =

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.476733Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:f17190c7aec22155d641839d2bae5d706d7f4d83f81ade6e1c3ccf34dced84cd

Observation 78919c18-a2a0-4337-957f-b6d15cd09539 · outbound

This paper cites StruQ: Defending Against Prompt Injection with Structured Queries.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents StruQ: Defending Against Prompt Injection with Structured Queries

Reference 16

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.817986Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:91a2df2d3dddaaf9833040b810585051e63ec89e3ac6890db96b0f0b8c424c5f

Observation b0d2471a-cb92-4ab3-b7b7-449b2c03e040 · outbound

This paper cites The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions

Reference 17

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.837230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:447a592d4a330df98ddd82dfbcce54f444cf89a3a13da9ce6ae637a8637341be

Observation 8307068c-9e34-4b53-a007-691be5f826ac · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 18

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.834766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:07aab04a6f19d6120ca249ddebbbe213b464610a8770052880f958b69641437b

Observation 5ad7d524-9616-467d-86b6-7f7de54617e2 · outbound

This paper cites N e M o Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents N e M o Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails

Reference 19

Resolution
metadata mismatch
doi, observed 2026-07-10T08:16:58.755987Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:86ece3b1f88c0f1be1a708692e1317473b52aed65a8a87d7f924a93a6e2e602f

Observation 2f4713cf-d49c-4c79-8e16-59eb00ebb682 · outbound

This paper cites Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena

Reference 20

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.799445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:a0892b87779455360f6300baad550f427d408b44d7ac04d6414593050d6e5bf0

Observation 42dda8c5-ef59-480f-a63d-b193e5386289 · outbound

This paper cites G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment

Reference 21

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.811903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:25f8204e3de6a8254c84abe0de6b5d4439dd43ee32a17ad86bb28565b568d5df

Observation 15392d6f-5a54-41cf-8448-3330a8117018 · outbound

This paper cites Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw

Reference 22

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.839855Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:aab711747da22d11ceb05dfa8e1c87aa98ed4b9e963ed5358d4c219938bb44d7

Observation 67af150f-91ec-4ada-8b7f-1468dc7adce1 · outbound

This paper cites 2023 , url =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , url =

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.471828Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:96b420f9751ad41b3f7259916e7742228caa974f6efeeb69d8762288b5043cc5

Observation 6656da4c-d36b-443a-a95b-d9f7ab9a934d · outbound

This paper cites 2023 , url =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , url =

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.480128Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:72a2561e6959be71d32ccaabc78392e993b42167b0ae4349cd85d6113d2c8240

Observation 5ed95c6a-6115-4749-9d13-7437a80653b7 · outbound

This paper cites O'Brien and Carrie Jun Cai and Meredith Ringel Morris and Percy Liang and Michael S.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents O'Brien and Carrie Jun Cai and Meredith Ringel Morris and Percy Liang and Michael S

Reference 25

Resolution
metadata mismatch
arxiv_id, observed 2026-07-10T08:16:58.753704Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:a76e9c140a5dfcb534fa8ed86311038ea4b48d4fb4c62ca524bdf1c31e912485

Observation 76313bb9-8deb-444d-b9ae-012b07def7bf · outbound

This paper cites Voyager: An Open-Ended Embodied Agent with Large Language Models.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Voyager: An Open-Ended Embodied Agent with Large Language Models

Reference 26

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.823571Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:f2fcf33e80f787b0cf2e00bf09f92a337fa02aabd29a03c7a21033bfde474c38

Observation aedee156-93bf-49b3-8835-a4d7916c0f03 · outbound

This paper cites LlamaFirewall: An open source guardrail system for building secure AI agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents LlamaFirewall: An open source guardrail system for building secure AI agents

Reference 27

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.805108Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:cc10661c041a9248602e93ca1819370f4d1d5e3c38dbd99f2a97f2619a666c0d

Observation b5c5447c-1768-458d-a84a-12699ad9842c · outbound

This paper cites Prompt Injection attack against LLM-integrated Applications.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Prompt Injection attack against LLM-integrated Applications

Reference 28

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.845736Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:c18eaa8bfadc299ce8e17b3fc02db54e618c70fc669c9a5accfe5cf091b80a79

Observation c3cf1fd7-def9-47f4-9bcd-4535e81c31d8 · outbound

This paper cites InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents

Reference 29

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.848341Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:fd5e5319003f06cfc251fe7e804579f8764d58e3774ade98d7c473a3a926de7b

Observation f8f24a97-de4e-4a4b-bf1a-4aa51fdbb6fa · outbound

This paper cites 2023 , eprint =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , eprint =

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.463902Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:0a74e9b82dde365ebb9fe311f453b42fcb365e25efcbc5c00c4d29d930bea043

Observation 55c2d5dd-8f7d-4980-baad-71197a5a1f51 · outbound

This paper cites Meta secalign: A secure foundation llm against prompt injection attacks.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Meta secalign: A secure foundation llm against prompt injection attacks

Reference 31

Resolution
metadata mismatch
arxiv_id, observed 2026-07-10T08:16:58.859830Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:9b664497b40962ba4f7e1e856aa814de3b0ec80745b766e9e69df23cfb61660d

Observation 52af86bb-b290-478c-80e7-c339a5cf4386 · outbound

This paper cites Yi Liu, Gelei Deng, Yuekang Li, Kailong Wang, Tianwei Zhang, Yepang Liu, Haoyu Wang, Yan Zheng, and Yang Liu.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Yi Liu, Gelei Deng, Yuekang Li, Kailong Wang, Tianwei Zhang, Yepang Liu, Haoyu Wang, Yan Zheng, and Yang Liu

Reference 32

Resolution
metadata mismatch
arxiv_id, observed 2026-07-10T08:16:58.814859Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:75ddc3f0fc0b474e3deeaffa5ba5d5dff7b69308e5d0324ffbeee728d2127ca7

Observation 83b1748d-5466-41c1-9175-e13dfae6ddec · outbound

This paper cites OpenGuardrails: A Configurable, Unified, and Scalable Guardrails Platform for Large Language Models.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents OpenGuardrails: A Configurable, Unified, and Scalable Guardrails Platform for Large Language Models

Reference 33

Resolution
metadata mismatch
arxiv_id, observed 2026-07-10T08:16:58.809134Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:641b66580d8d921ad4d8a84c1a4db21f8d4a5b69ebb781ba1814631e66782631

Observation 4edf4873-8aa1-4d96-aeab-faec9d7611b0 · outbound

This paper cites Toward Securing.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Toward Securing

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.478437Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:ed380ad38d557fa7eeb27252c4c4b92b9aa0a7a3f4ed41e3a1f54fad9a325dfe

Observation 5837ba3d-d119-4d4e-9721-d90a4044c6b9 · outbound

This paper cites and Lombardo, J.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents and Lombardo, J

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.473517Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:6f6410f40079538e4eae9b8c5ff95ae08beebf0dd3d9a41aef87b3f2ffe343f0

Observation 72da2104-17aa-418a-9a93-304d17119d3a · outbound

This paper cites Authenticated Delegation and Authorized AI Agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Authenticated Delegation and Authorized AI Agents

Reference 36

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.831834Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:16193f799d8c2f8509a1eb908da6a8ddb514c3db6eaa9bd43456a619a1d3b086

Observation 93c07458-c99a-4d5b-b8d6-6341f4fd33e4 · outbound

This paper cites Owner-Harm: A Missing Threat Model for AI Agent Safety.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Owner-Harm: A Missing Threat Model for AI Agent Safety

Reference 37

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.828971Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:a346650f8ce857754556524ce89e1ef1ee938959482655defef5493552304e79

Observation f8fe62a6-3db1-4c0a-8e13-a04409c7b331 · outbound

This paper cites Agent-Sentry: Bounding LLM Agents via Execution Provenance.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Agent-Sentry: Bounding LLM Agents via Execution Provenance

Reference 38

Resolution
verified exact
local_arxiv, observed 2026-07-10T08:16:58.850974Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:a26de14b23a9ad936e718030392c4ed0dfd921dc61a31c3e6321e768f231a70f

Observation 5d978f9b-f689-4b46-a6a1-fdea60cde3ec · outbound

This paper cites 2025 , eprint =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2025 , eprint =

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.496045Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:6f4ff4a840fb2a838ac9e2b90231d362be3f4f14a952c64f1c38e75c75ce03dd

Observation a68bfef1-a9c3-4a9d-80d8-9d1d672d2a71 · outbound

This paper cites Securing.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Securing

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.497650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:a9bcbc0dbe87238a3e828c8d25c1c11966b887b661316870cdbf76ef65a27ab2

Observation 36d2a7a9-9240-4569-8644-3f7827787bcd · outbound

This paper cites 2026 , url =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2026 , url =

Reference 41

Resolution
parse uncertain
raw_fallback, observed 2026-07-10T08:16:59.499643Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:95ffbe211d4a8d381ff8a4c67f98dafd37f6b3c3ca8cd88fdd492b731d10bca6

Observation 5e208f93-a8b6-4633-915d-964d1741657b · outbound

This paper cites Openclaw prism: A zero-fork, defense-in-depth runtime security layer for tool-augmented llm agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Openclaw prism: A zero-fork, defense-in-depth runtime security layer for tool-augmented llm agents

Reference 42

Resolution
metadata mismatch
arxiv_id, observed 2026-07-10T08:16:58.853798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:b0ce764c360497b0983141115ca759dc8430a91cfc1d07aa3f4d38eeb57408db

Observation 1912f538-b7c3-4d29-87d0-a343f6b956a6 · outbound

This paper cites AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents

Reference 43

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T08:16:58.856614Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:0b0b52c9ce190434f81b25e5ee72e96f7856b32efef6c055d598cc177a17f96b

Observation fe7a1014-63d5-4f3a-8fc0-a428add4bdc7 · outbound

This paper cites an unresolved cited work.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work

Reference 44

Resolution
parse uncertain
raw_fallback, observed 2026-07-10T08:16:59.503026Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:ccc602c61bd535b209893c40bc437fa2ecee2db264ab4b74abd19a0a27df9418

Observation ca113b24-abee-4027-a1cb-241960562188 · outbound

This paper cites an unresolved cited work.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work

Reference 45

Resolution
parse uncertain
raw_fallback, observed 2026-07-10T08:16:59.466062Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:71c04f70db47609537b3bd7be37db2a7036f9bc49a0c1ed5d81fb6379753dc70

Observation a20ddd14-8d3e-40ee-89cd-4c7d240b8fbc · outbound

This paper cites 2026 , url =.

Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2026 , url =

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-07-10T08:16:59.468126Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T08:08:21.077290Z digest=sha256:961f3f43474ab8bfe3e98586d04e2cdaac3da0acb6d022f03a5aa98c83c40902

Pith citing papers

No inbound Pith citation observations are available.