{"as_of":"2026-08-06T16:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fa3462fefc1dbfe72134a6fbd422090123ffef1b939b213cfc69b0f4cd18f82f","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T15:17:29.479184Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.16199/citation-record","integrity":"/paper/2607.16199/integrity","json":"/paper/2607.16199/citation-record.json","paper":"/paper/2607.16199"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:27.615826Z","title":"Journal of the American Statistical Association , volume =","venue":null,"work_id":null,"year":1927},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:27.615826Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:7ebb6296175cfd2a329c472aa9b8da8167ccf7a17109b26ee6ba392b354fb88e","observation_id":"5bdcb069-8227-4b9a-b096-0cb6d834d37b","resolution":{"observed_at":"2026-08-02T15:17:27.615826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:27.752139Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:27.752139Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:bbea9e18f63d1fd79a97c4e60b7b2800c48eb35e0038f30172fd026535b946b3","observation_id":"f5b1ebbe-523d-405d-b18b-8bb50fffbe35","resolution":{"observed_at":"2026-08-02T15:17:27.752139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:27.959144Z","title":"2023 , url =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:27.959144Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:cc1feb392c9b563ec3c37275fb22eb297be7ba9668be9864e72fe564c7eaae07","observation_id":"3ee823ef-f1eb-4310-858f-993a3f50ad6a","resolution":{"observed_at":"2026-08-02T15:17:27.959144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.120632Z","title":"NeurIPS 2022 Workshop on Machine Learning Safety , year =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.120632Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:ddfef45e60039cd9b0c2ad5d4f1b135ba1c2c0bde045245142617f3aea22d03d","observation_id":"d025a1b7-f2e6-430e-be18-534b93b4be04","resolution":{"observed_at":"2026-08-02T15:17:28.120632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.265132Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.265132Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:5cba1fa01d6147bd527fc0c41b719fe483cbca1fa3d492891364c89b7da3195b","observation_id":"1e312d81-5c65-497a-a3fd-f13df30e2d5c","resolution":{"observed_at":"2026-08-02T15:17:28.265132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.413984Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.413984Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:d1fa2ae7e056c6e7138eb8552af6eaa7f91397a7a6f6bfb9ff1b4fb9e971a0d4","observation_id":"52a968b0-98b4-463d-be9f-63e104767b54","resolution":{"observed_at":"2026-08-02T15:17:28.413984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.534536Z","title":"Prompt Injection Attacks and Defenses in","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.534536Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:d39f428ff556e8b3f315b852755a1198a7dd1c33e51aaa6433b90e9e2cd28dac","observation_id":"c17a6101-563e-4298-989e-b21e998110f9","resolution":{"observed_at":"2026-08-02T15:17:28.534536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.678620Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.678620Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:2c0d0063f283d6dd5f65b2907a46e90a6f75c178fbb302938662ad773b7b0878","observation_id":"11c4323f-ffa5-4b6d-89f5-9b316091fe50","resolution":{"observed_at":"2026-08-02T15:17:28.678620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.840151Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.840151Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:f0313351e476ae6b1abf38385ce073e02e2f01ac0d23cac2599cbb397a7afe33","observation_id":"74894152-b036-4f5e-816d-bca2418cfd10","resolution":{"observed_at":"2026-08-02T15:17:28.840151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:28.958281Z","title":"Attacking","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:28.958281Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:b25f0037f1c1bc75ae3e0cebc034fa463d8c9bf88288a368176d201252593262","observation_id":"76bfd947-e939-48c5-a95f-a8a9a582705d","resolution":{"observed_at":"2026-08-02T15:17:28.958281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.116748Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.116748Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:825c03a706f6d05bf6e706b062c82e795f09f81e8c525a8389ce680eb479cc63","observation_id":"3a0c74c1-1049-40e7-a6b9-f1e2837bf3e8","resolution":{"observed_at":"2026-08-02T15:17:29.116748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.240479Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.240479Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:3fed74a3f3946d2428f20ffac71e435496ae508381d9ebe0f084f45d7d159ac1","observation_id":"25a1bc25-61a8-463a-b2f4-7cdf136081d2","resolution":{"observed_at":"2026-08-02T15:17:29.240479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.340623Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.340623Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:8cb5f3c06dc3a50da8b074eb9118fbf45ce4f29d1f9c03d518fac8905f649582","observation_id":"f8c4f50b-4413-47ea-b224-a7971dae13c3","resolution":{"observed_at":"2026-08-02T15:17:29.340623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.412501Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.412501Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:cb7dd12d421d255a92e002894929de8889d31603ffc93bed024950b8cb851a41","observation_id":"c9a1d163-31d2-4b13-818b-0b228c904dac","resolution":{"observed_at":"2026-08-02T15:17:29.412501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.415803Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.415803Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:9770f7dd4acf837e680ba568b1a2e30573610ffdf4df2e8204efb35d27ca386d","observation_id":"ce2a988f-53b1-4b48-8d9f-b5ee5b387546","resolution":{"observed_at":"2026-08-02T15:17:29.415803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-02T15:17:29.418864Z","title":"arXiv preprint arXiv:2310.08419 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.418864Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:7807c1c3790b5167aa4800d1736326d5419360570d513d08577dbd961f9e7bcf","observation_id":"9d638403-f8ee-45d8-9fce-e9e46c902f6c","resolution":{"observed_at":"2026-08-02T15:17:29.418864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-02T15:17:29.422657Z","title":"arXiv preprint arXiv:2307.15043 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.422657Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:a4816f66f14ba85a127dee36253062d27a4b9f5bafe4b628ee5dee3be823c27a","observation_id":"f6182295-1ae6-4d67-9182-e85e0d224286","resolution":{"observed_at":"2026-08-02T15:17:29.422657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.426297Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.426297Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:cd31e7987c36bf00882f3686158abc373b5faaa71777ca4c7dfd57805c68faf8","observation_id":"f7ee0831-6047-4dda-b90b-85658c2f1e46","resolution":{"observed_at":"2026-08-02T15:17:29.426297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.429349Z","title":"Constitutional","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.429349Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:e659ba3cb0fd057085f1260704a1a3be420e05e54c7ef5f488ac4a0f2025e184","observation_id":"846b7641-4a4a-4091-9478-3d0a9f6a37ff","resolution":{"observed_at":"2026-08-02T15:17:29.429349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.432193Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.432193Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:08abd503392b3b0a5a1d91eee813c91b559f849c6d47feb22442e8c23e500909","observation_id":"fc6aff80-f33c-4332-bba6-22d64f83a5cf","resolution":{"observed_at":"2026-08-02T15:17:29.432193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.435175Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.435175Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:43bf58790c31d4e35624da2f2a6bc1b250360f710cf404aca51803112566053a","observation_id":"f9790650-daa7-4e46-9ef5-7cca0dd413b6","resolution":{"observed_at":"2026-08-02T15:17:29.435175Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.438273Z","title":"and others , booktitle =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.438273Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:5dead335e3a5cea28dc53b9c8763dc850b51f1f1d592fa40e87941fe84c293de","observation_id":"c2bc4bc7-2dbf-4a2c-89a8-42902bc26b8f","resolution":{"observed_at":"2026-08-02T15:17:29.438273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.441044Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.441044Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:ea7f1d0942272af7e6cb30d1b5e097ca7d56e470e0c73f893335b3a64d74f7bd","observation_id":"189f4930-9815-4868-996a-6f9dc90aca16","resolution":{"observed_at":"2026-08-02T15:17:29.441044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.443703Z","title":"Proceedings of the Annual Meeting of the Association for Computational Linguistics , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.443703Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:35c47edeb002e50d8e62a548a32f585bf22935764e0f4ba0c382ede4ef9a0a77","observation_id":"4ce5cec2-84dc-456c-b2c6-6d189f232b81","resolution":{"observed_at":"2026-08-02T15:17:29.443703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.446470Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.446470Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:c6ece4491ea094dd152bb76af54cd9182d9244911717879057e07c3d68b43818","observation_id":"1bb4f15a-1882-4314-927d-ce47e14435ae","resolution":{"observed_at":"2026-08-02T15:17:29.446470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.449028Z","title":"Compromising","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.449028Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:d28382a8208a4d1c3869eda6218671556d7410fa306a60ca78f89d9064b7fdfe","observation_id":"8fc0feaa-bbf0-412a-aa5f-0af62b0fbdc7","resolution":{"observed_at":"2026-08-02T15:17:29.449028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.451950Z","title":"2024 , url =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.451950Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:6400f61a16298ee1916d1b7b9fd2fe078d37843774bad3c27914fba85a19169f","observation_id":"8e2b9935-0c73-4e56-a298-75b7498d5e79","resolution":{"observed_at":"2026-08-02T15:17:29.451950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.454633Z","title":"Frontiers of Computer Science , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.454633Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:2d378ce682c53848c3b6358f4493335d86b72d942b22a81e400818534674a43e","observation_id":"063cf924-b0eb-4471-b496-b0454940bf64","resolution":{"observed_at":"2026-08-02T15:17:29.454633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07864","last_updated":"2023-09-19T08:29:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-14T17:12:03Z","title":"The Rise and Potential of Large Language Model Based Agents: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07864","snapshot_observed_at":"2026-08-02T15:17:29.457576Z","title":"arXiv preprint arXiv:2309.07864 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.457576Z"},"links":{"cited_paper":"/paper/2309.07864","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:503bd2bd0691b518c857795320dd9d9aa528b65c565e766d870e2c6473089520","observation_id":"7e33a91c-c267-499a-96d0-abc06cc61931","resolution":{"observed_at":"2026-08-02T15:17:29.457576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.460950Z","title":"Prompt Infection:","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.460950Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:b76ee12fd3d5b3e0a705ef928215fce310b85e92cccec857791942f8921aedc4","observation_id":"c9373fb1-e977-40ae-a268-4deb497ea6a1","resolution":{"observed_at":"2026-08-02T15:17:29.460950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.463791Z","title":"Red-Teaming","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.463791Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:10f9b76fda39db02f1f2af62e8e91a31cd4f8240a00f810f528e8adf6d5d0912","observation_id":"d50f9a3d-1c06-4442-938e-35e905fd822f","resolution":{"observed_at":"2026-08-02T15:17:29.463791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.466737Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.466737Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:b11cadbed320e98aace9baaac274e3d23939562798eff833cc7a189b4199b5d5","observation_id":"16fce5b9-dc4e-4b9f-8ae6-446fd23733d5","resolution":{"observed_at":"2026-08-02T15:17:29.466737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-07-06T21:49:47.325553Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23844","snapshot_observed_at":"2026-08-02T15:17:29.469563Z","title":"arXiv preprint arXiv:2506.23844 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.469563Z"},"links":{"cited_paper":"/paper/2506.23844","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:1e10a731f8cd83cc3783a545a7536ed77f42efdc7df9b317154d3d10cc3eef2f","observation_id":"be1d85a4-5975-489e-9f0b-6517f3b994b3","resolution":{"observed_at":"2026-08-02T15:17:29.469563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.07962","last_updated":"2025-06-09T17:37:18Z","snapshot_observed_at":"2026-08-02T03:25:06.728272Z","submitted_at":"2025-06-09T17:37:18Z","title":"Correlated Errors in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.07962","snapshot_observed_at":"2026-08-02T15:17:29.473018Z","title":"arXiv preprint arXiv:2506.07962 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.473018Z"},"links":{"cited_paper":"/paper/2506.07962","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:e5d6d104db265a45a22b62db4bddeec5060517aef04c3af288986e89cce6e709","observation_id":"68444501-b105-4269-9ecc-3c00fdd0f4cb","resolution":{"observed_at":"2026-08-02T15:17:29.473018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:17:29.476262Z","title":"Self-Inconsistency in","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.476262Z"},"links":{"citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:b36a769c07dad6174678cd6802051ccc96469d76fdabf14205d81a08757fbab1","observation_id":"84e6eda4-d9c1-4aa6-8980-b53339ec34b6","resolution":{"observed_at":"2026-08-02T15:17:29.476262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10758","snapshot_observed_at":"2026-08-02T15:17:29.479184Z","title":"arXiv preprint arXiv:2601.10758 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-02T15:17:29.479184Z"},"links":{"cited_paper":"/paper/2601.10758","citing_paper":"/paper/2607.16199"},"observation_digest":"sha256:e699021d08b7dc97516f76a777ff4584d7070f71c7a822880be57a80fdd1f509","observation_id":"434c2944-cfc8-4d31-83f4-cebc5b6a34f8","resolution":{"observed_at":"2026-08-02T15:17:29.479184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.16199","last_updated":"2026-04-30T07:22:06Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-06T11:01:04.860071Z","submitted_at":"2026-04-30T07:22:06Z","title":"PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":36,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:2607.16199."}