{"as_of":"2026-08-18T09:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9ce88b45f4caca481d538454cebf26390712b623ecc02f33c970efbbea71f471","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T14:16:02.860255Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.18826/citation-record","integrity":"/paper/2607.18826/integrity","json":"/paper/2607.18826/citation-record.json","paper":"/paper/2607.18826"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.196940Z","title":"Seven Security Challenges That Must Be Solved in Cross-Domain Multi-Agent","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.196940Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:ba652712ddcedea9f142b42c7c0dd76b0de5f45b43d06a000e753d245f57022a","observation_id":"155d7724-106e-4eaf-aaad-8e632fe4bee3","resolution":{"observed_at":"2026-08-01T14:15:58.196940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.316056Z","title":"Securing the","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.316056Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:0197b67d93585edfdf6c155246a6b6d872083b89f5b15f7e0d3d58ed9db606ac","observation_id":"5d39b2f6-b2ce-42a6-b80b-6764e353c1c6","resolution":{"observed_at":"2026-08-01T14:15:58.316056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.413891Z","title":"2025 , note =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.413891Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:081f1ef770c4b7545a6351d64b27493fc191f7f8810d6ed62d895507ce896ee3","observation_id":"5095db4a-d655-4635-9e38-94fb5a266a00","resolution":{"observed_at":"2026-08-01T14:15:58.413891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.472552Z","title":"2025 , note =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.472552Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:836cfbdc5ce92b7aac3a9e4e38ca3cf751a411fd9fc14cd44c4923337fe9dc1f","observation_id":"4994bc1b-aee1-4e52-8184-76400c74fe7c","resolution":{"observed_at":"2026-08-01T14:15:58.472552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.573494Z","title":"and Chen, Pin-Yu , booktitle =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.573494Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:afef6f8f956a862bde252f16b8148983e67e199f0ad544115df52527d352311d","observation_id":"8936a89b-17b5-4acc-a158-df7c9ac7cc31","resolution":{"observed_at":"2026-08-01T14:15:58.573494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-17T17:40:10.591866Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-01T14:15:58.709855Z","title":"arXiv preprint arXiv:2503.18813 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.709855Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:09101f718f608a1b7cf789b01ecc2d6576207a58e1ad4f2b8bbebecbc0c237fb","observation_id":"c678e05d-e767-4e58-9354-c4408e3d4428","resolution":{"observed_at":"2026-08-01T14:15:58.709855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.844885Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.844885Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:e7845a61748a8504867c822a4460772467bbf6ce667e27679904288957bcfdab","observation_id":"6b25eb68-2872-46e0-998a-e5958e424da7","resolution":{"observed_at":"2026-08-01T14:15:58.844885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:58.955761Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:58.955761Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:7bbcb46f0087b958e27dee6c8b21387e175387262e0ca26aa39f7f98e1c53fc3","observation_id":"6e33ee91-af24-4e29-b41b-275818fe098e","resolution":{"observed_at":"2026-08-01T14:15:58.955761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:59.086058Z","title":"Prompt Infection:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:59.086058Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:7b237785c7869e147f68302cce4db92eff5a015c4726f5ea367c8bbbd477b94a","observation_id":"9204c624-4a01-431c-ab77-59b986670665","resolution":{"observed_at":"2026-08-01T14:15:59.086058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:59.338098Z","title":"arXiv preprint arXiv:2603.04469 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:59.338098Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:c4604092cec51647cf29c2c9c8f66919ae61bb79624beafce147abde65605fde","observation_id":"087bccbd-0617-4e82-9b72-7afe70a42695","resolution":{"observed_at":"2026-08-01T14:15:59.338098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:59.571860Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:59.571860Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:da3f1a9bfd3212ff088ce4f912f58960f8630a9c816e11ab0b28f28833d7468a","observation_id":"28797983-47a1-4af5-92a9-1e2e01f019fc","resolution":{"observed_at":"2026-08-01T14:15:59.571860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:15:59.760034Z","title":"A Practical Memory Injection Attack (","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:59.760034Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:1b730eadc7fb85c2e9d1872027bb86732208bd829425cd00e1b75025cb916b76","observation_id":"0d2f1f22-9270-4daa-9b8f-e63cc95fd07b","resolution":{"observed_at":"2026-08-01T14:15:59.760034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-16T14:14:18.269562Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-08-01T14:15:59.929815Z","title":"arXiv preprint arXiv:2604.02623 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-01T14:15:59.929815Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:04c4979a61aeb44357fbf59e751fbb985469c02fbddee3de1cf8b9f12639e22f","observation_id":"f223ae09-f9e0-45cc-84bd-3cb96d4ac2d0","resolution":{"observed_at":"2026-08-01T14:15:59.929815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.12188","last_updated":"2025-09-12T19:53:17Z","snapshot_observed_at":"2026-08-16T12:49:44.761313Z","submitted_at":"2025-03-15T16:16:08Z","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.12188","snapshot_observed_at":"2026-08-01T14:16:00.056317Z","title":"arXiv preprint arXiv:2503.12188 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.056317Z"},"links":{"cited_paper":"/paper/2503.12188","citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:7e7cfb0eea576e739f761616d3e82410aa560822c71f59a0cdec9b9a41364e0c","observation_id":"d976e7ac-341b-42cd-8b2c-dcb1a89582dc","resolution":{"observed_at":"2026-08-01T14:16:00.056317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.173536Z","title":"Agents Under Siege: Breaking Pragmatic Multi-Agent","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.173536Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:a04338d2170779c4d27e895d2aba194ac11d7c77d4e7aa8c502fc3c4cc7b4712","observation_id":"44341ebf-ab00-4b32-bfe6-503434fefdc7","resolution":{"observed_at":"2026-08-01T14:16:00.173536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.286444Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.286444Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:3c670b07de4d93e5109d78cc2c6be273cf85ca1ec999a88700e0c1724b2aca24","observation_id":"3b44e171-2280-4e7f-bb83-252f0d8df92a","resolution":{"observed_at":"2026-08-01T14:16:00.286444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.393358Z","title":"and Gosmar, Dario , journal =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.393358Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:3c5e2978c9f963cf94f842bbd1e84190493238e1f1130228ea8b10d047a8bdd5","observation_id":"9f6a81bb-98ab-498c-98a4-cf25333cfc7e","resolution":{"observed_at":"2026-08-01T14:16:00.393358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.478367Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.478367Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:3f289a6c3aff752e2e24c77b4e5e00ee9e0620953cb819733952d27b969c7ded","observation_id":"c6de89ae-a26e-4384-8868-b6a76ca43930","resolution":{"observed_at":"2026-08-01T14:16:00.478367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.580478Z","title":"2024 , doi =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.580478Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:fe055a96aca67aaa50d8a8ca6e957e255501b7cdeb3d62a5511501aa22d59d5d","observation_id":"1fcbd2dc-1c35-4e2f-a163-7007f97b0cc6","resolution":{"observed_at":"2026-08-01T14:16:00.580478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.662780Z","title":"2024 , note =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.662780Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:c5b910795d4942549978f2cb79eca1585ca26327a43c7d142bcc0ce967c4922b","observation_id":"5f301b8a-6a19-4d69-8b91-03ea0d991942","resolution":{"observed_at":"2026-08-01T14:16:00.662780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.750320Z","title":"2024 , note =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.750320Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:6b49e4c40f72937adb8e0e4eae11af7c6c1baf39c66ab1d12e3f5981ac7e6081","observation_id":"36e83908-1078-43f8-8013-39fd44872703","resolution":{"observed_at":"2026-08-01T14:16:00.750320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.832374Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.832374Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:4a1c22ad75cce4719719966f846afb4495f8641f6aea2680314cb7771e5b37c3","observation_id":"73d2cd51-4c3e-44bd-80b4-320a25346797","resolution":{"observed_at":"2026-08-01T14:16:00.832374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:00.917775Z","title":"2024 , note =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:00.917775Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:594829eb316a0927505a6c68532c3979468e0896e49d284220aca05494b64b5f","observation_id":"4770b7ed-28b7-48b7-be72-386fad38c2cb","resolution":{"observed_at":"2026-08-01T14:16:00.917775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.053477Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.053477Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:195282370db6c65ae99365daabcf0ac3a9fbbbf27e8d6973854e6c66a8ee7d2a","observation_id":"2cb36faa-2321-4c65-937c-ab5d253990fc","resolution":{"observed_at":"2026-08-01T14:16:01.053477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.174969Z","title":"and Shafiq, Zubair , booktitle =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.174969Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:66ba9665fe7ae82e771be7106b6ebb7721d86c582b9e920f1ea27951757f0b58","observation_id":"f2b5c2d6-180d-4ccf-b728-537ddb345ced","resolution":{"observed_at":"2026-08-01T14:16:01.174969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.280203Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.280203Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:ebbf217a91fd5e4f4a3a9f2b68bc77ec61950d2b7cc86466b2796fba619cde07","observation_id":"096e34c0-b7eb-4af3-b406-d6407d563c29","resolution":{"observed_at":"2026-08-01T14:16:01.280203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.402032Z","title":"Journal of the American Society for Information Science and Technology , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.402032Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:c5adfee495ce2abdf209481c257fb766d794613bd754a39b3928120e13cec9a2","observation_id":"ed96f925-26eb-497f-ad29-d5d2b64d3a96","resolution":{"observed_at":"2026-08-01T14:16:01.402032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.485996Z","title":"The Annals of Statistics , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.485996Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:b53f58942a1d98110c084182670ff8185e4fe8f55c4af1ad3fa3c9d589818012","observation_id":"84685a19-c5da-4bd5-a062-a85e1b3fcb30","resolution":{"observed_at":"2026-08-01T14:16:01.485996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.602817Z","title":"Journal of Open Source Software , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.602817Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:a66bb2372d4acc9658502d904dd0ae8761ab211c2c5ed7735d001cba5ac679e4","observation_id":"00e576c5-65e1-440b-898a-644742550ac6","resolution":{"observed_at":"2026-08-01T14:16:01.602817Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.720242Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.720242Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:4b22604e52c9b8f63f53f318b3321c9403ed340078130931e26c751ba215f6a4","observation_id":"3f0a870f-4e97-44a3-bde1-4c8582307c26","resolution":{"observed_at":"2026-08-01T14:16:01.720242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.837155Z","title":"Advances in Neural Information Processing Systems (","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.837155Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:84995a3a3964fea289a621ad1a24eaceca839a42184c5ff2d70d598b063f8ad7","observation_id":"ff5e1f43-412c-4735-89a3-3663ea7abc10","resolution":{"observed_at":"2026-08-01T14:16:01.837155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:01.954974Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:01.954974Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:d324784a39a6d8c980824d3504429d25b4a6c16a22ffbb731bb750f242bac720","observation_id":"5b7a088a-ac73-4338-8aa5-b2c149e4e985","resolution":{"observed_at":"2026-08-01T14:16:01.954974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.050105Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.050105Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:3ce4557401c4053af3b42952989b5088a799f6aae92c5c4921edee023134037d","observation_id":"3d7bfb94-78d0-4f4b-b44e-ddc451bc4f35","resolution":{"observed_at":"2026-08-01T14:16:02.050105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.18333","last_updated":"2025-05-23T19:39:56Z","snapshot_observed_at":"2026-08-07T14:30:46.734293Z","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.18333","snapshot_observed_at":"2026-08-01T14:16:02.108479Z","title":"arXiv preprint arXiv:2505.18333 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.108479Z"},"links":{"cited_paper":"/paper/2505.18333","citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:cf9f799107f3ae9ef3173118a73803003af7aeff2fd0dc6625934d7433d213c4","observation_id":"de5d4d42-435f-4589-b3e8-289ab318f26c","resolution":{"observed_at":"2026-08-01T14:16:02.108479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.213560Z","title":"Beyond the Prompt: Log-Based Threat Detection and Attribution for Multi-Agent","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.213560Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:fd705efad7ab97520d6204b3abcb93572607f9a631f94313de50d8f50fabf4f4","observation_id":"ef951f47-a390-4bfd-a299-d5d5185cd829","resolution":{"observed_at":"2026-08-01T14:16:02.213560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.297561Z","title":"Cross-Session Threats in","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.297561Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:77f98b6c17156db4de3cf0225dbbe4bd397979f68010bf7be1dae536daa7fbb2","observation_id":"176a8577-cd50-4b15-88e9-68b3504bf2ae","resolution":{"observed_at":"2026-08-01T14:16:02.297561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.382864Z","title":"2026 , note =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.382864Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:ceb70dba0ea14f7b5a6db186f2aa1d3b2db53ad9e5887ee37779f3ccecf73ea5","observation_id":"a874f28e-b888-4e82-872c-7c0a24114823","resolution":{"observed_at":"2026-08-01T14:16:02.382864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.463440Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.463440Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:6d54f2901e611eb3295151ef654557e3a172b6fa2d0c4449cb8fc3cb34c6cfd0","observation_id":"5781d2e1-bfdf-4b64-90be-f7f5dd67b2d3","resolution":{"observed_at":"2026-08-01T14:16:02.463440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.519332Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.519332Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:e08ba1281699ec97ed11a38557855cfa40d0e0709b365d41061ac747b7f8f196","observation_id":"3f998813-2b67-465b-b4e4-e1f53c63d84d","resolution":{"observed_at":"2026-08-01T14:16:02.519332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.658443Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.658443Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:19476e698031338f56af158e86ef682be29f4e58ae6b70cd70f619f941c136c9","observation_id":"3e5c46da-78e1-4bf4-bf2e-763366a96506","resolution":{"observed_at":"2026-08-01T14:16:02.658443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.727095Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.727095Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:5c845aa3df8a535be1ca030455e9a544c3cf4fc1f764890adf3c73cb63a35727","observation_id":"6247dd09-ace8-423f-99ae-6465912a7b7d","resolution":{"observed_at":"2026-08-01T14:16:02.727095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.792859Z","title":"2025 , url =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.792859Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:18ee844dffe5eb518d55866913e9a767b7d0adebd7fc8a2870cb84dc8b69e011","observation_id":"f9845c82-15ad-4351-a7ef-cf75ddc3cccc","resolution":{"observed_at":"2026-08-01T14:16:02.792859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T14:16:02.860255Z","title":"Proceedings of the 5th International Conference on Natural Language Processing for Digital Humanities , pages =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-01T14:16:02.860255Z"},"links":{"citing_paper":"/paper/2607.18826"},"observation_digest":"sha256:3bec4e242507cb7229164a53d32d05e60bdcc3734fea341c4031520cf5717ae9","observation_id":"9c519e75-6141-4b72-ad2b-9a9109e61b2e","resolution":{"observed_at":"2026-08-01T14:16:02.860255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.18826","last_updated":"2026-07-21T08:01:51Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T16:00:41.479181Z","submitted_at":"2026-07-21T08:01:51Z","title":"Cross-Agent Campaign Attribution: Linking Asynchronous Attacks Across LLM Agents"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":43,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2607.18826."}