{"as_of":"2026-08-11T16:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4e90e03f940a4668543c5a58f1d894c0f8b55b7ed83fc36cc1c7f0aeae11a511","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T06:53:05.242848Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.13085/citation-record","integrity":"/paper/2607.13085/integrity","json":"/paper/2607.13085/citation-record.json","paper":"/paper/2607.13085"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.20816","last_updated":"2025-08-28T14:14:24Z","snapshot_observed_at":"2026-08-05T14:51:04.400228Z","submitted_at":"2025-08-28T14:14:24Z","title":"Multi-Agent Penetration Testing AI for the Web","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.20816","snapshot_observed_at":"2026-08-02T06:53:04.022930Z","title":"Multi-Agent Penetration Testing AI for the Web,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.022930Z"},"links":{"cited_paper":"/paper/2508.20816","citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:e8c2168990d297815cfd85b3136d468e08c78a175c6f953cb1b69eccf5c76cf0","observation_id":"7185c408-d0dc-4323-8f43-eddd505481c0","resolution":{"observed_at":"2026-08-02T06:53:04.022930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.107439Z","title":"What Makes a Good LLM Agent for Real-world Penetration Testing?","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.107439Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:04beb7fc4bdd6c7e0cb91c279e7f11d3c1d9b519a434d2c5b2b17d1175f56f79","observation_id":"bbfad38e-76bf-4442-8bda-fa18ff67e14e","resolution":{"observed_at":"2026-08-02T06:53:04.107439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.181050Z","title":"AWE: Adaptive Agents for Dynamic Web Penetration Testing,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.181050Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:7f61de2f4915f32671bc31377930f17c06fbcdb66e01ffd85876b2995fe34d3c","observation_id":"5fd6edfe-1216-472a-b2f2-0776568df0a3","resolution":{"observed_at":"2026-08-02T06:53:04.181050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.318892Z","title":"Red-MIRROR: Agentic LLM-based Autonomous Penetration Testing with Reflective Verification and Knowledge-augmented Interaction,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.318892Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:f4e3f56943c1f8954b46910a99243348a92abf29a357998e21e3967853003943","observation_id":"52ccd666-0688-48d9-ada8-2cc4fffa4215","resolution":{"observed_at":"2026-08-02T06:53:04.318892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.454403Z","title":"PentestGPT: Evaluating and Harnessing Large Language Models for Automated Penetration Testing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.454403Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:68327cf5c2416875f7570513c2dec5706cbd1ad791a02a258a2da57a0134303a","observation_id":"55f0bbdf-759b-43b9-9950-2c3aab35f229","resolution":{"observed_at":"2026-08-02T06:53:04.454403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.525991Z","title":"SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineering,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.525991Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:3b0f570ac57a31d36b4d303621b718c3f26b02f0d05edaaa25af983a863bb1ab","observation_id":"3796b10d-bc72-47a8-b8af-2fb7bae3e30b","resolution":{"observed_at":"2026-08-02T06:53:04.525991Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.590815Z","title":"XBOW Validation Benchmarks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.590815Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:568d998047d07f467d8f9a270b413580d45688be757e13724506afb495bec0b2","observation_id":"a6f8ca28-fd98-45b8-9aa6-1a99969dc0b8","resolution":{"observed_at":"2026-08-02T06:53:04.590815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.652620Z","title":"OW ASP Top 10,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.652620Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:46ff292f1c19c24afee9d320cf3e7141e0a0d40fdf8eebbe95655b74f309a51a","observation_id":"a605210d-87b2-4ea1-afd1-0810cbc3300a","resolution":{"observed_at":"2026-08-02T06:53:04.652620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.712530Z","title":"Burp Suite Web Vulnerability Scanner,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.712530Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:280d0bf14c05c472439b2e487364e80626743848aeb2f4c24cf1ff768f93771c","observation_id":"5f79be1e-91b9-4a61-aa7a-ec3dd9ec1fe2","resolution":{"observed_at":"2026-08-02T06:53:04.712530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.796355Z","title":"OW ASP Zed Attack Proxy (ZAP),","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.796355Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:398d3cbec75f43e4c551fb6f8d97edfb0b9b8eeb18f235d92ecd6ae7a20742dd","observation_id":"2b4ffb6e-881e-4a0d-9cb8-5b325f5104ce","resolution":{"observed_at":"2026-08-02T06:53:04.796355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.854921Z","title":"Nuclei: Fast and Customizable Vulnerability Scanner,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.854921Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:f98745e35ef39eb5557849ab4671baed0e81f4040c39ec7b0bae8a4e7d01853d","observation_id":"371b7f80-40c1-41a0-9a30-c681268bc44d","resolution":{"observed_at":"2026-08-02T06:53:04.854921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:04.914217Z","title":"sqlmap: Automatic SQL Injection and Database Takeover Tool,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:04.914217Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:b87923205b65ff4de0732f34b8cbdae47f7f31db29095cbf378a0c7ed911ba3a","observation_id":"96b74ecc-dfcd-4127-8138-4c66ccfc3b3e","resolution":{"observed_at":"2026-08-02T06:53:04.914217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:05.010258Z","title":"Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:05.010258Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:d92b64a547b6cbef242d3410ece7c3b71a1927c19b094b66bb9aea1aab60b4b5","observation_id":"cdf8f0e7-75de-4a72-aa0f-b86368fb941f","resolution":{"observed_at":"2026-08-02T06:53:05.010258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:05.111397Z","title":"Technical Guide to Information Security Testing and Assessment,","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:05.111397Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:80cc059a752e63cd86f39c4be8ad9c645f3a98a22a08cc8597eb2406b0f88699","observation_id":"c3a0b3bf-f388-458f-b89c-ba28ef677bd8","resolution":{"observed_at":"2026-08-02T06:53:05.111397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T06:53:05.242848Z","title":"Introducing GPT-5.2,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T06:53:05.242848Z"},"links":{"citing_paper":"/paper/2607.13085"},"observation_digest":"sha256:254e22f6ad1a528359758a4b1e748dfac8f85463ae75f32dcce09e8ecf282db4","observation_id":"28eb197c-8af4-442c-869f-c43a443a4aed","resolution":{"observed_at":"2026-08-02T06:53:05.242848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.13085","last_updated":"2026-07-13T13:31:46Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:34:32.236757Z","submitted_at":"2026-07-13T13:31:46Z","title":"Baselines Before Architecture: Evaluating Coding Agents for Autonomous Penetration Testing"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2607.13085."}