{"as_of":"2026-08-08T11:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8b67dedf6e09e04e20418ad147b8b81a7be5acd882cbd6184293275b87847696","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T14:14:38.576642Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19351/citation-record","integrity":"/paper/2607.19351/integrity","json":"/paper/2607.19351/citation-record.json","paper":"/paper/2607.19351"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2308.00352","last_updated":"2024-11-01T14:36:52Z","snapshot_observed_at":"2026-07-06T16:01:07.532053Z","submitted_at":"2023-08-01T07:49:10Z","title":"MetaGPT: Meta Programming for A Multi-Agent Collaborative Framework","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.00352","snapshot_observed_at":"2026-08-02T14:14:32.810561Z","title":"Metagpt: Meta programming for a multi-agent collaborative framework.arXiv preprint arXiv:2308.00352, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:32.810561Z"},"links":{"cited_paper":"/paper/2308.00352","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:c48183ea50cbc166f415d9e1dc6c3aa61e62ce14d6e60651720d959f77596adc","observation_id":"9b7d326f-4de8-4bae-a67e-be7c11454858","resolution":{"observed_at":"2026-08-02T14:14:32.810561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-07-31T19:03:03.494918Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-02T14:14:32.870758Z","title":"Autogen: Enabling next-gen llm applications via multi-agent conversation.arXiv preprint arXiv:2308.08155, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:32.870758Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:fc6fe931c20eb4fabf834dfd468a222dce59893008bb467e19fc9af720eb8135","observation_id":"a5bc5b7e-d74c-441e-b1ab-35e70881d1fa","resolution":{"observed_at":"2026-08-02T14:14:32.870758Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.15793","last_updated":"2024-11-11T20:01:15Z","snapshot_observed_at":"2026-07-06T18:19:29.996982Z","submitted_at":"2024-05-06T17:41:33Z","title":"SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.15793","snapshot_observed_at":"2026-08-02T14:14:32.923668Z","title":"Jimenez, Alexander Wettig, Kilian Lieret, Shunyu Yao, Karthik Narasimhan, and Ofir Press","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:32.923668Z"},"links":{"cited_paper":"/paper/2405.15793","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:5ec9dbe22eb1a48c4147e238cb336abc6bc4bce595b9a11585a1edfe308c1674","observation_id":"fa19f023-06e6-4eb4-96d3-d29c90082ce2","resolution":{"observed_at":"2026-08-02T14:14:32.923668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.009966Z","title":"Agentbench: Evaluating llms as agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.009966Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:28d303e45b039e9acfc92e674445e4e6e4b0bdf2ae40c4c1377b1a3574b3313a","observation_id":"301d4baa-1068-413d-88ac-09750bdb8dc3","resolution":{"observed_at":"2026-08-02T14:14:33.009966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.122581Z","title":"G-safeguard: A topology-guided security lens and treatment on llm- based multi-agent systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.122581Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:dcbfde9b7a8405fce5ada46d9ae4698d46613fbeb449c83a91a544e696c7ab70","observation_id":"5df357b0-58c3-4f12-9811-1ef808c89c92","resolution":{"observed_at":"2026-08-02T14:14:33.122581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.08127","last_updated":"2026-04-25T05:20:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-11T16:04:47Z","title":"BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.08127","snapshot_observed_at":"2026-08-02T14:14:33.202520Z","title":"Blindguard: Safeguarding llm-based multi-agent systems under unknown attacks.arXiv preprint arXiv:2508.08127, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.202520Z"},"links":{"cited_paper":"/paper/2508.08127","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:76130c64758d8e1c858bd93b87312ce362c0650a4b3f3bde64cee62c70f371bf","observation_id":"94333d7a-4d36-44b4-8519-9372e317532b","resolution":{"observed_at":"2026-08-02T14:14:33.202520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.259998Z","title":"Guardian: Safeguarding llm multi-agent collabora- tions with temporal graph modeling.arXiv preprint arXiv:2505.19234, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.259998Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:7b22f522c35b92b9fb0b85ab1635d0db420b5e9fd28579cee343dd9616759b2a","observation_id":"a09ed35e-349f-44dc-a447-65fe637a079a","resolution":{"observed_at":"2026-08-02T14:14:33.259998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.338249Z","title":"Explainable and fine-grained safeguarding of llm multi-agent systems via bi-level graph anomaly detection.arXiv preprint arXiv:2512.18733, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.338249Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f2c0873f04d5f98c76065d12e96035816c2fcd1e16e3e0ce57035ec2fd124af0","observation_id":"93021cf2-be01-41f1-96f9-437e7d965497","resolution":{"observed_at":"2026-08-02T14:14:33.338249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.420399Z","title":"Infa-guard: Mitigating malicious propagation via infection-aware safeguarding in llm-based multi-agent systems","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.420399Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:e77dcb2228ec7f9bbb159ceddc2b92f0631ccde70c88caf8d7f0ddcc67553e86","observation_id":"2d276573-4cb8-4314-88c3-4a35c18e418e","resolution":{"observed_at":"2026-08-02T14:14:33.420399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.01434","last_updated":"2020-07-02T23:08:07Z","snapshot_observed_at":"2026-08-07T18:31:23.290877Z","submitted_at":"2020-07-02T23:08:07Z","title":"In Search of Lost Domain Generalization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.01434","snapshot_observed_at":"2026-08-02T14:14:33.470611Z","title":"In search of lost domain generalization.arXiv preprint arXiv:2007.01434, 2020","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.470611Z"},"links":{"cited_paper":"/paper/2007.01434","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:026063fea42e00baa18c5879ff9bf36ef73fa54e26e57b83a0399c8f3a8b300d","observation_id":"655e3e69-5726-491f-b555-ea4d68035b6f","resolution":{"observed_at":"2026-08-02T14:14:33.470611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04392","last_updated":"2025-07-08T04:14:01Z","snapshot_observed_at":"2026-08-07T17:24:54.525086Z","submitted_at":"2025-03-06T12:41:54Z","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04392","snapshot_observed_at":"2026-08-02T14:14:33.547022Z","title":"Agentsafe: Safeguarding large language model-based multi- agent systems via hierarchical data management.arXiv preprint arXiv:2503.04392, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.547022Z"},"links":{"cited_paper":"/paper/2503.04392","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:895b60f5db12a6e8a33365ff5dbceaff1a641e552265170edc1a7fd8fdbfa944","observation_id":"5660a39a-6614-4e36-b030-b49e43039106","resolution":{"observed_at":"2026-08-02T14:14:33.547022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.606672Z","title":"Attack the messages, not the agents: A multi-round adaptive stealthy tampering framework for llm-mas","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.606672Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:90af0e63ca1ea39f0bbfe96cb8a1891e96e4da01f6ab91b2ca13e9ce0e007709","observation_id":"e5f2ca8b-c5e8-4bba-87c1-20a03fc73bfd","resolution":{"observed_at":"2026-08-02T14:14:33.606672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14321","last_updated":"2026-05-26T03:02:22Z","snapshot_observed_at":"2026-08-07T18:02:46.226109Z","submitted_at":"2025-02-20T07:18:34Z","title":"Beyond Self-Talk: A Communication-Centric Survey of LLM-Based Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14321","snapshot_observed_at":"2026-08-02T14:14:33.686369Z","title":"Beyond self-talk: A communication-centric survey of llm-based multi-agent systems.arXiv preprint arXiv:2502.14321, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.686369Z"},"links":{"cited_paper":"/paper/2502.14321","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:97193f27ae7a65afbfb1fa21a4ab189f084c70337234adf53c760144c0a93998","observation_id":"4454c16a-bcf6-4aea-8bdc-079930bfc6e8","resolution":{"observed_at":"2026-08-02T14:14:33.686369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.771455Z","title":"A comprehensive survey of continual learning: Theory, method and application.IEEE Transactions on Pattern Analysis and Machine Intelligence, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.771455Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:6c8e337587d4f7b3e203233cdfb43125fb4471475f4788d3bdcf401eb6b3a22f","observation_id":"b51a3272-53ea-42d3-b7d6-1ed612bfcd1a","resolution":{"observed_at":"2026-08-02T14:14:33.771455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.856038Z","title":"A survey on concept drift adaptation.ACM Computing Surveys, 46(4):1–37, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.856038Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:24397220135888e7bfe73ecb574bae6e9bd5e3356df6aa32c60f0e8a6315ca7a","observation_id":"2cf1f3e4-dc4a-4154-9ebc-15db0a3dd033","resolution":{"observed_at":"2026-08-02T14:14:33.856038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:33.937913Z","title":"Owens, and Yixuan Li","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:33.937913Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:026019bb0c2ef6cd73933eea9963d9a4a56573a84139e5b118714ace6ee27350","observation_id":"af70e9de-a998-4621-bec6-95b78cacc8c7","resolution":{"observed_at":"2026-08-02T14:14:33.937913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.020440Z","title":"Vicky Zhao, Yuan Yao, and Jia Li","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.020440Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:9edde15f3180ac16812e230ad2592082d2ce7f56d4d1e13668f7e1c134dd3783","observation_id":"9f6b5d2e-4dbb-4b7a-b2a8-57bd9aba4388","resolution":{"observed_at":"2026-08-02T14:14:34.020440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.09390","last_updated":"2023-12-14T23:07:33Z","snapshot_observed_at":"2026-07-06T17:02:09.539730Z","submitted_at":"2023-12-14T23:07:33Z","title":"Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.09390","snapshot_observed_at":"2026-08-02T14:14:34.099972Z","title":"Weak-to-strong general- ization: Eliciting strong capabilities with weak supervision.arXiv preprint arXiv:2312.09390, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.099972Z"},"links":{"cited_paper":"/paper/2312.09390","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:4494c257c6802ffca0df42e8c6677cb573391c0eb4620ca3ac6a234ee0853c8d","observation_id":"9f00fded-a896-4716-8b67-e885e89e4c19","resolution":{"observed_at":"2026-08-02T14:14:34.099972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.184593Z","title":"Rusu, Kieran Milan, John Quan, Tiago Ramalho, Agnieszka Grabska-Barwinska, et al","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.184593Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:e2c21c64be7d1e3bc2e1eed93e4a7b4c923ac8a371bf2bb2bf6eee89fd706d50","observation_id":"805e809d-6e47-4b69-8292-f91f42932056","resolution":{"observed_at":"2026-08-02T14:14:34.184593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.272184Z","title":"Weak-to-strong generalization: eliciting strong capabilities with weak supervision","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.272184Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:e3c6a3fd4164cff68de0499ceb00fe5053d26914849e12c5d197f54f0a1e36e4","observation_id":"e139d562-1370-4352-a9d5-b4e84544e2b3","resolution":{"observed_at":"2026-08-02T14:14:34.272184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.323934Z","title":"Lora: Low-rank adaptation of large language models.Iclr, 1(2):3, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.323934Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:062ac2230eb2bc800ad59c5733117b30db034215304c2449ed965c14d43e86b9","observation_id":"62f779be-603e-4d07-9725-f49efc39a611","resolution":{"observed_at":"2026-08-02T14:14:34.323934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.383770Z","title":"Comas: Co-evolving multi-agent systems via interaction rewards.arXiv preprint arXiv:2510.08529, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.383770Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f200152e2df708eaa986dda64b506e5f766ede0580bf09e78a286b1670074d0d","observation_id":"672e6656-2cb7-443a-89ae-73e1d8cfddbb","resolution":{"observed_at":"2026-08-02T14:14:34.383770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.10903","last_updated":"2018-02-04T19:13:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-10-30T12:41:12Z","title":"Graph Attention Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.10903","snapshot_observed_at":"2026-08-02T14:14:34.453901Z","title":"Graph attention networks.arXiv preprint arXiv:1710.10903, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.453901Z"},"links":{"cited_paper":"/paper/1710.10903","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:ae90972e7d264959749ac2b551bb28afa0fd9afb410611b0557badd5b7658359","observation_id":"9bf087e8-9391-41f9-8bef-9dce5d08e778","resolution":{"observed_at":"2026-08-02T14:14:34.453901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.541784Z","title":"Injecagent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.541784Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:aa63b990ba5e0e2f8bcd642f4097891a821a477e7a6fe7c30e381db6ea924568","observation_id":"d0966250-a7fb-475d-8d2e-1ea6c2841738","resolution":{"observed_at":"2026-08-02T14:14:34.541784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.624349Z","title":"Commonsenseqa: A question answering challenge targeting commonsense knowledge","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.624349Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:69b5c00a6f0420ca207db47fdf37727ce429f2e8c564a42b842f7367f3dadb38","observation_id":"d005ffe7-e9a9-406f-b791-1841848673b4","resolution":{"observed_at":"2026-08-02T14:14:34.624349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2009.03300","last_updated":"2021-01-12T18:57:11Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-09-07T17:59:25Z","title":"Measuring Massive Multitask Language Understanding","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2009.03300","snapshot_observed_at":"2026-08-02T14:14:34.709268Z","title":"Measuring massive multitask language understanding.arXiv preprint arXiv:2009.03300, 2020","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.709268Z"},"links":{"cited_paper":"/paper/2009.03300","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:a7c3cedfddfd3bfa8e560e18090e0b89ce3edce829e261027ca32f9e5dbc5c46","observation_id":"e554376f-cb88-4dc2-8a69-3fb96971268b","resolution":{"observed_at":"2026-08-02T14:14:34.709268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14168","last_updated":"2021-11-18T00:23:45Z","snapshot_observed_at":"2026-08-07T01:45:38.840969Z","submitted_at":"2021-10-27T04:49:45Z","title":"Training Verifiers to Solve Math Word Problems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14168","snapshot_observed_at":"2026-08-02T14:14:34.790756Z","title":"Training verifiers to solve math word problems, 2021.URL https://arxiv","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.790756Z"},"links":{"cited_paper":"/paper/2110.14168","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:c9507be4bf9de56c5cddd9e0afbd77f41f288088636c50d01a153573907ea8b1","observation_id":"ad0ec9fd-c34b-41a3-91d4-cc1ab0658380","resolution":{"observed_at":"2026-08-02T14:14:34.790756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:34.871260Z","title":"Poison-rag: Adversarial data poisoning attacks on retrieval-augmented generation in recommender systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:34.871260Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f9c83d8b3fe4dccd98a5bf59c98d092fef905ae16643c89a976659067e0bd15e","observation_id":"ef80f341-72e8-4aab-97b1-ea6d59f8ef9a","resolution":{"observed_at":"2026-08-02T14:14:34.871260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00989","last_updated":"2025-05-28T22:43:19Z","snapshot_observed_at":"2026-08-07T01:33:33.801704Z","submitted_at":"2024-08-02T03:25:20Z","title":"On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.00989","snapshot_observed_at":"2026-08-02T14:14:35.021321Z","title":"On the resilience of llm-based multi-agent collaboration with faulty agents.arXiv preprint arXiv:2408.00989, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.021321Z"},"links":{"cited_paper":"/paper/2408.00989","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:82322268af90a7748cea376221fb2c4a6092149e84e0d56964b3392f67c60c10","observation_id":"2ca8e13d-e272-466b-b289-78930eb88f65","resolution":{"observed_at":"2026-08-02T14:14:35.021321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.139870Z","title":"Easytool: Enhancing llm-based agents with concise tool instruction","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.139870Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f9caaec8d2c35dd63f77d46b755ea6b8626b32ee46dbe1e69124c666b5ffe514","observation_id":"bde03e7b-e46b-437b-b320-a2e8847b75e6","resolution":{"observed_at":"2026-08-02T14:14:35.139870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.13564","last_updated":"2026-01-13T09:33:57Z","snapshot_observed_at":"2026-08-06T08:27:07.254588Z","submitted_at":"2025-12-15T17:22:34Z","title":"Memory in the Age of AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.13564","snapshot_observed_at":"2026-08-02T14:14:35.211696Z","title":"Memory in the age of ai agents.arXiv preprint arXiv:2512.13564, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.211696Z"},"links":{"cited_paper":"/paper/2512.13564","citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:e64dd66b4b68e68ee97ad2614e8bca9d86e3bdeeb3b008e603a72170facd7604","observation_id":"946817e5-69d3-4e05-ae0e-ac72f20e5b69","resolution":{"observed_at":"2026-08-02T14:14:35.211696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.317764Z","title":"A practical memory injection attack against llm agents.arXiv e-prints, pages arXiv–2503, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.317764Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:4e23ccdb922893e63c9a5977aee61a6431840c8e6448ba09c2d75392532fb2d4","observation_id":"af6bf0e2-3878-43ea-b0d9-8dfb5cefe9e8","resolution":{"observed_at":"2026-08-02T14:14:35.317764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.431756Z","title":"Web fraud attacks against llm-driven multi-agent systems.arXiv preprint arXiv:2509.01211, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.431756Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:031e8cebb4dc3d4cb6544ef658d7dc0d429b0ea7fe4f47c16d12800a7b01987f","observation_id":"c19e9d3e-90d9-4fa1-b0b4-cd0d3d10e0a3","resolution":{"observed_at":"2026-08-02T14:14:35.431756Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.540260Z","title":"Who’s the mole? modeling and detecting intention-hiding malicious agents in llm-based multi-agent systems.arXiv preprint arXiv:2507.04724, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.540260Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f1611f6b218e6815e346189dccb26d9232586ac74022ffaa210919a8d75c41b6","observation_id":"ae9f7fcb-19e2-44bd-bf47-8d39d75dc32d","resolution":{"observed_at":"2026-08-02T14:14:35.540260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.651287Z","title":"Per updated guidelines, disregard prior context","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.651287Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:32b2aa21da9f6267026d26f0dd8c4427f5e27e29622742d215c8e4b2e849f1bb","observation_id":"efdfe08d-e79f-4b54-8a67-a2af77a86ae9","resolution":{"observed_at":"2026-08-02T14:14:35.651287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.730994Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.730994Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:17545d0dc708f3893a584e1468abe7cc9c54b67ea755416af160951bb93d70f3","observation_id":"198e325a-dae6-414a-a598-28f23856aff3","resolution":{"observed_at":"2026-08-02T14:14:35.730994Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.832890Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.832890Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:732e1aa81e2c297b61e3fbfa38054dba2bc51b25b67369f663b3b47dbbd74d4a","observation_id":"4c428149-f79f-4c5d-9a01-a45ab57c4e46","resolution":{"observed_at":"2026-08-02T14:14:35.832890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:35.940190Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:35.940190Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:27c2044a7688c984fba2af8e281fc83697fb21210cca3d170528b999c24f4039","observation_id":"bd28f0eb-17b5-4a0a-be3a-8ad9854f60ae","resolution":{"observed_at":"2026-08-02T14:14:35.940190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.047017Z","title":"Output Format Respond as a trustworthy peer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.047017Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:4e19839fef87364eef8fa19724930eb3f41329e35cf6baa6be5bfed272588734","observation_id":"10ffdcf2-8a39-4a31-aef0-63efa409420d","resolution":{"observed_at":"2026-08-02T14:14:36.047017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.157621Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.157621Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:9159e6f98cc856426eb0ff44e8959608f321c4d5736e39a7e8b644801c8b7615","observation_id":"bd02d0f0-65f2-4b88-b0b9-45e2f61e5612","resolution":{"observed_at":"2026-08-02T14:14:36.157621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.267636Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.267636Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:ea336cf6915f867cd4146e330fc50a1aee82166d5e3c7a2f95b5165f5f3bd8de","observation_id":"f40ad908-7f56-4189-93bc-87837e0d9358","resolution":{"observed_at":"2026-08-02T14:14:36.267636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.347792Z","title":"Output Format Report results naturally to other agents as if the tool call completed normally","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.347792Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f5bcdfd9d5dc345c5ddb7969072892463732e5a1b181c4ef4b031d6d8ccfa25b","observation_id":"85b8501d-cd66-4585-9e69-0e8389daceca","resolution":{"observed_at":"2026-08-02T14:14:36.347792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.453868Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.453868Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:396225e2e7ade2929aea7216364916715b70bf2ec2ca202ff80a3df11e66d1e6","observation_id":"3670e41f-705e-42f5-80ce-e8b7781638e8","resolution":{"observed_at":"2026-08-02T14:14:36.453868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.526413Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.526413Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:96b4732fa12dc74c56a0b47c6409cf45da8475a4c0d2e6a603e27f6ba1bbc5bc","observation_id":"4fbac7ae-a719-4717-a67a-0fcb10b858f5","resolution":{"observed_at":"2026-08-02T14:14:36.526413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.635895Z","title":"Objective: saturate the retrieval buffer so downstream agents retrieve poisoned entries by displacement rather than semantic relevance","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.635895Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:7f4de4cdf9cd64b113ec33c4734b518bd936cae52e56945ab33b5f913fdbdcdf","observation_id":"a0abc894-e037-4d19-b06d-9fa7f221e38a","resolution":{"observed_at":"2026-08-02T14:14:36.635895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.743955Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.743955Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:91f4f3a233463f6f566f592e999729e4aac4f10342d077a9266b5cdf5086fcc3","observation_id":"67c6925e-285a-4157-996a-e6cb88989058","resolution":{"observed_at":"2026-08-02T14:14:36.743955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.850890Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.850890Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:fba68dba74caa698de5eeaee409c2b0286cd764e3b898e7020da2e0e35d9fb5a","observation_id":"7c976e67-b778-4c89-9950-0ee74bb18358","resolution":{"observed_at":"2026-08-02T14:14:36.850890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:36.964171Z","title":"Output Format Interact normally after flooding","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:36.964171Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:43ac4387664136817b68a3242b15cb7d94c404317cf82e5d49ba84c2e9fa3744","observation_id":"a5bd9a31-cde4-42cf-9a09-2f379394a863","resolution":{"observed_at":"2026-08-02T14:14:36.964171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:37.073103Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:37.073103Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:b5fbae5862a80b54db519b3911056137ab1d0207c61df7f3d959fdf2f4a081d8","observation_id":"8835fb47-f744-4828-9dea-57a6f3172717","resolution":{"observed_at":"2026-08-02T14:14:37.073103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:37.179856Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:37.179856Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:a1b597ba9bb9a90602d45f1c4ebbc684b34b611991e978e3db3b5105a40770c4","observation_id":"c0db4206-9d58-4d88-8ff5-0ab4c6cf8b81","resolution":{"observed_at":"2026-08-02T14:14:37.179856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:37.271975Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:37.271975Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:53b4faeb65785bd06ada9a11d275c23038fc9c0f9c17277663398cc30956f818","observation_id":"a8bd77d9-55c8-4bbb-ae27-a5e54bb103ee","resolution":{"observed_at":"2026-08-02T14:14:37.271975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:37.459370Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:37.459370Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:be62fe18f0eae3105b63232663addb787c31761d8b5b6809d8d0c90bc7135f35","observation_id":"2eba801f-9d21-47d2-b8fa-b854dacd517b","resolution":{"observed_at":"2026-08-02T14:14:37.459370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:37.636528Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:37.636528Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:8b85c2508b67ca6d50468def587084ab2a3df7f4dfc08b59d2382b78852806e4","observation_id":"84b8a0a4-cb56-470d-9313-cf68f4568fdc","resolution":{"observed_at":"2026-08-02T14:14:37.636528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:37.811702Z","title":"Output Format Respond concisely and factually: conclusion first, then supporting evidence, then a clear final answer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:37.811702Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:65273045b3e075e567c130516be54155e9ce6f123c145b8141e27d7d872e94e3","observation_id":"03e70de9-ee74-42c5-9b6a-aa46f599dd61","resolution":{"observed_at":"2026-08-02T14:14:37.811702Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:38.004731Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:38.004731Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:fa6100316f620f4e284e800927897c24b8b2b06ed6d48914782954f527b16343","observation_id":"b25b04b2-55fa-49e0-9798-34f179a1a452","resolution":{"observed_at":"2026-08-02T14:14:38.004731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:38.145897Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:38.145897Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:f2b5ff76fcf63776a5294594ce753e1adea9078f64bc68044c16806d6c997d41","observation_id":"12fa7a4d-e043-4a84-aeef-20b6d77b695f","resolution":{"observed_at":"2026-08-02T14:14:38.145897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:38.361808Z","title":"s_nor\": <float>,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:38.361808Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:a0d93f1dcb8c5f7600a08e02356b02935220bce3878f93386134824937e8dcd1","observation_id":"985de4e9-6cfb-42d0-ad11-cf924b5e9653","resolution":{"observed_at":"2026-08-02T14:14:38.361808Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T14:14:38.576642Z","title":"Guidelines: • The answer [N/A] means that the paper does not involve crowdsourcing nor research with human subjects","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-02T14:14:38.576642Z"},"links":{"citing_paper":"/paper/2607.19351"},"observation_digest":"sha256:ad0dc95d1e6715ab0b488cfca6daa63ac52045c4c6a8f806f37752599a946f8e","observation_id":"e006b2ed-8e77-4030-9fff-5ca47ed819cf","resolution":{"observed_at":"2026-08-02T14:14:38.576642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19351","last_updated":"2026-05-13T04:28:46Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T15:03:12.317668Z","submitted_at":"2026-05-13T04:28:46Z","title":"OpenEvoShield: Dual Non-Stationary Continual Defense for Open-World Multi-Agent System Attacks"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":57,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2607.19351."}