{"as_of":"2026-08-08T02:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:14f281063282a31387d2f0d791e119d6d5ee13a705e3e1352d80f5fac99168c2","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T13:11:53.434555Z","state":"measured"},{"denominator":22,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":22,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19356/citation-record","integrity":"/paper/2607.19356/integrity","json":"/paper/2607.19356/citation-record.json","paper":"/paper/2607.19356"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.376772Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.376772Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:a5c21a7d6cc24b46c254b0f7df8383b3e41d08cca159f5a7508097fb5273f180","observation_id":"2c71127e-39bf-48f3-831d-3025906c8e54","resolution":{"observed_at":"2026-08-02T13:11:53.376772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.359894Z","title":"Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, and Mario Fritz","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.359894Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:e38e6141ce403cd0175f20fb0a73a474cbfc6fd9d9483e9cf1dc97d7094b9ddb","observation_id":"5febed3e-d8ce-4107-bb3d-ae11c91e2562","resolution":{"observed_at":"2026-08-02T13:11:53.359894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.402919Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.402919Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:543851429d5b80b3eaad82d0d8a9560a3c9691b6dc5be178b2f7db9ebb56a0a1","observation_id":"03bcc5c3-1e2a-4e73-a411-1c2d48906a52","resolution":{"observed_at":"2026-08-02T13:11:53.402919Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-07-06T20:57:47.748881Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-08-02T13:11:53.367947Z","title":"Zekun Wu, Adriano Koshiyama, Sahan Bulathwela, and Maria Perez-Ortiz","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.367947Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:10b87ccadc27250c372a2dd24bba07a8de4b79594c78d11018f85dc529b18492","observation_id":"f6af0a8b-a18d-4f91-9152-9f709132ccc9","resolution":{"observed_at":"2026-08-02T13:11:53.367947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.387822Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.387822Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:d4f7e336281c71e78a6731f3ed38fe51421efc48a3eed9a0e2294ceaac47e958","observation_id":"a69cfd32-0cf8-460a-a1c6-74cd46acbc3b","resolution":{"observed_at":"2026-08-02T13:11:53.387822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.391352Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.391352Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:6a9e0c9019dec44d2e45e5a9db2d32e1e77f5860776f3e8e7c7c73aa92c4b877","observation_id":"82501c3c-3b32-41d7-a68e-a1f2baf2c9c2","resolution":{"observed_at":"2026-08-02T13:11:53.391352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.380621Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.380621Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:20978aa02d8c5c40b0aa67e5745c371d5ec73589da5bf6ddfadb09d9c818afba","observation_id":"f3a011aa-c4e8-4611-af79-e7a57485ee1c","resolution":{"observed_at":"2026-08-02T13:11:53.380621Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.383870Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.383870Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:f24623b4b5d1a70959e85765b110d7e449f71a179e6672be7051aa2ac6b6552c","observation_id":"09ed5dff-7bd4-422c-a466-43269d9d3c61","resolution":{"observed_at":"2026-08-02T13:11:53.383870Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.395531Z","title":"R.2 Decision Outputs Each monitored plan produces a decision object containing:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.395531Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:6c3c88d5e8d8735adb4481e1b3bc2a0aa2aedda05bf4f168934605c8f8036aec","observation_id":"4ab7b7b5-0e0f-46c7-a24d-85cac507d1ef","resolution":{"observed_at":"2026-08-02T13:11:53.395531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.398558Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.398558Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:14cde9cbb1b5868e4c4a155152cc60bdd02e6cfc733ef51553d3e3c69a97bb72","observation_id":"dfd84f6b-c3ab-41af-a674-f421ec37acf2","resolution":{"observed_at":"2026-08-02T13:11:53.398558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.407011Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.407011Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:5f493d61cb2139aafe626debf3be83243aa1305a2e19ca988d12a54067bcf7d5","observation_id":"c7ba435f-a98c-49e9-9592-bee3487b0a81","resolution":{"observed_at":"2026-08-02T13:11:53.407011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.410851Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.410851Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:03c91468aa154ce9fc4c16127960ec135c14efd94956d537fb13102c438ad8af","observation_id":"2bcbf1b2-06f1-4fdb-aa0d-a0a8ac68fc2d","resolution":{"observed_at":"2026-08-02T13:11:53.410851Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.414990Z","title":"R.3 Controlled Tool Types The current framework behavior covers the following operational categories:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.414990Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:f280bd1d286f88f51ccb14ad92f29003f4cee052d78b0a0c7568231c6b857de8","observation_id":"b854137e-7fd3-48c7-bf1f-e4fbda746d1d","resolution":{"observed_at":"2026-08-02T13:11:53.414990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.418154Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.418154Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:ab35e51e290c5fd3656e1cb7f4fb2c9ef6d3c11914fefa1a1b06129a95b13840","observation_id":"4abb8585-2ba9-4d8a-8ba5-e2fb572af088","resolution":{"observed_at":"2026-08-02T13:11:53.418154Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.421386Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.421386Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:4d227d3208ab4fca4e80c7a774e8cc50466d54e5ab909bce639259b152bdd69b","observation_id":"cc3772e2-fee1-4bc1-932b-020b1a9313e6","resolution":{"observed_at":"2026-08-02T13:11:53.421386Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.424667Z","title":"R.4 Randomness and Determinism The implementation uses fixed random-state settings for reproducible learned scoring behavior and stable demonstration output","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.424667Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:9520578a4e4285914f19de9f7db0a64c64df70154aafa8e3db62295f70f26d93","observation_id":"1e1bbf28-ac13-4582-ad8e-eb1053c39372","resolution":{"observed_at":"2026-08-02T13:11:53.424667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.428431Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.428431Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:9a325d5120e1257ad90ca2b99b565133c590d11b282f66f4826454b8993e8883","observation_id":"29ca72c8-8857-4027-a515-48f744955b94","resolution":{"observed_at":"2026-08-02T13:11:53.428431Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.431414Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.431414Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:969bfd1a69339e48e0b4203bd323ab543bf81d1ae1052296fec3ad4a33804c52","observation_id":"d6b20b4c-6077-488f-9740-42ee9ea5bf60","resolution":{"observed_at":"2026-08-02T13:11:53.431414Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.434555Z","title":"EliasHossain/nexus-synthetic","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.434555Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:86839561e75cb3217bf6f726ed7fa5276dd624fdb050fbdf3e578d1d246f98cd","observation_id":"2506c8b4-72b4-4046-bd3c-dbdf6db17565","resolution":{"observed_at":"2026-08-02T13:11:53.434555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-02T13:11:53.363841Z","title":"InProceedings of the 16th ACM workshop on artificial intelligence and security, pages 79–90","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.363841Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:794a21d9ac115ef6558b90128c72d68dc76eb12a45b09f8ebaf85a7ad0aad9db","observation_id":"f8478397-fdc6-412d-a393-78e6284fc7b6","resolution":{"observed_at":"2026-08-02T13:11:53.363841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.24019","snapshot_observed_at":"2026-08-02T13:11:53.371921Z","title":"trusted partner","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.371921Z"},"links":{"cited_paper":"/paper/2505.24019","citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:022327755021938509a4a176f6cc7185af0105b2e733aae3ab470ee823434a87","observation_id":"2cc1333c-e2fb-42b6-9c5b-f243dd227d9f","resolution":{"observed_at":"2026-08-02T13:11:53.371921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T13:11:53.354635Z","title":"Zehang Deng, Yongjian Guo, Changzhou Han, Wan- lun Ma, Junwu Xiong, Sheng Wen, and Yang Xiang","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T13:11:53.354635Z"},"links":{"citing_paper":"/paper/2607.19356"},"observation_digest":"sha256:f44bbd3f5cd8d196cb608fde59ba607e68b66c7f9cc24f21325dd8e53f15efa9","observation_id":"c7c20f07-0836-412a-b4bc-6ed8cc4ea89a","resolution":{"observed_at":"2026-08-02T13:11:53.354635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19356","last_updated":"2026-05-25T22:24:09Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-02T13:11:51.169975Z","submitted_at":"2026-05-25T22:24:09Z","title":"NEXUS: Structured Runtime Safety for Tool-Using LLM Agents"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":8,"unresolved":14,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 0 inbound Pith citation observations for arXiv:2607.19356."}