{"as_of":"2026-08-07T05:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:29b70eac7fb7619f34b3a385dd6731795aea2d3b1b19ba364ef4bef460341b8d","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T13:32:29.381847Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19449/citation-record","integrity":"/paper/2607.19449/integrity","json":"/paper/2607.19449/citation-record.json","paper":"/paper/2607.19449"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T13:32:28.256476Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.256476Z"},"links":{"citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:bc930260e933f105de098f65b5d936fe8265296992985628155690a7e2f1454b","observation_id":"18dd4466-8d49-4712-b031-27e77478d38b","resolution":{"observed_at":"2026-08-01T13:32:28.256476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T13:32:28.412560Z","title":"2022.LangChain","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.412560Z"},"links":{"citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:a0e45015b651831f6458316b2f919cffe3c4cf2466edb130509ef876e7f454d4","observation_id":"bd1b231e-7fde-42ba-9674-4e06797bdbb8","resolution":{"observed_at":"2026-08-01T13:32:28.412560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-01T13:32:28.555493Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.555493Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:c1c8e4953060d88f1f388b756096f99d31055fb152974b0d367a395f0ed7c81a","observation_id":"6ad12b20-9788-438a-8cf0-e574c99615c3","resolution":{"observed_at":"2026-08-01T13:32:28.555493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-01T13:32:28.638390Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.638390Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:cbb8dece8338cfd95f5cfac33d83dc798998fe31efd18fba6926b160d88ba9fc","observation_id":"7dcb1b53-9b6e-46c7-8517-7893b3e65c5a","resolution":{"observed_at":"2026-08-01T13:32:28.638390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T13:32:28.698688Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.698688Z"},"links":{"citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:a16f2a9d8c40f1c9beb8ce38446fb4cc44ff48ced679764860a5d58b43261db6","observation_id":"97fb5f10-7320-4508-911d-19fc2702a96a","resolution":{"observed_at":"2026-08-01T13:32:28.698688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T13:32:28.754948Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.754948Z"},"links":{"citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:dd8fc0b4a070aa5bee4def98ea6b7e84de569634c8bd3fb10ece8fca20742ac4","observation_id":"4e784f80-2647-493d-8b47-f2a4b97f77fa","resolution":{"observed_at":"2026-08-01T13:32:28.754948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03688","last_updated":"2025-10-04T03:54:18Z","snapshot_observed_at":"2026-08-06T20:36:41.418114Z","submitted_at":"2023-08-07T16:08:11Z","title":"AgentBench: Evaluating LLMs as Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03688","snapshot_observed_at":"2026-08-01T13:32:28.851035Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.851035Z"},"links":{"cited_paper":"/paper/2308.03688","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:a6c261889d085016fe3dc24ad983bfaea1c78ba663add4b3eb5e00b3325428d7","observation_id":"1e0e3b43-9f07-43af-828d-bfca0611122a","resolution":{"observed_at":"2026-08-01T13:32:28.851035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-01T13:32:28.941780Z","title":"2023.GPT-4 Technical Report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.941780Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:f41e359261bcd381961cc3404becc41d1f6f0d4bb12da7d5fe56498bf07b7254","observation_id":"fcb696dc-df53-466f-bb80-3cafc00c1e03","resolution":{"observed_at":"2026-08-01T13:32:28.941780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-08-01T13:32:28.984369Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:28.984369Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:c7ee92c99f8b4bd8c3facde0118866ac43080eaf17dc9290c4fb0f482ad784a5","observation_id":"6df75736-952d-45a1-a109-65ce7453fbf8","resolution":{"observed_at":"2026-08-01T13:32:28.984369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13548","last_updated":"2025-05-10T07:10:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-20T14:46:48Z","title":"Towards Understanding Sycophancy in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13548","snapshot_observed_at":"2026-08-01T13:32:29.021850Z","title":"Bowman, Newton Cheng, Esin Durmus, Zac Hatfield-Dodds, Scott R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:29.021850Z"},"links":{"cited_paper":"/paper/2310.13548","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:dc4ff7bf83a51d6ccee8db680b0162ddbfbcc79bbdde12b24ebf66028d7a1d9e","observation_id":"5d372112-1359-407f-a96a-bbd85947bd62","resolution":{"observed_at":"2026-08-01T13:32:29.021850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.04388","last_updated":"2023-12-09T21:25:02Z","snapshot_observed_at":"2026-08-02T07:12:38.105035Z","submitted_at":"2023-05-07T22:44:25Z","title":"Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Prompting","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.04388","snapshot_observed_at":"2026-08-01T13:32:29.076683Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:29.076683Z"},"links":{"cited_paper":"/paper/2305.04388","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:187d667103c8008284903f2e5deddac4b4d02126731ba0938d538b6b46968937","observation_id":"7198e472-2e76-4e26-8d90-da064b4f76cc","resolution":{"observed_at":"2026-08-01T13:32:29.076683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T13:32:29.116487Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:29.116487Z"},"links":{"citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:1c4bb8ba07ffc6cfc866fd97027b86609308a864868e7b1d884b0cbba9b46ec9","observation_id":"1afc3dad-63fd-47c2-b1e8-46643423f7e0","resolution":{"observed_at":"2026-08-01T13:32:29.116487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.07315","last_updated":"2025-09-09T01:31:25Z","snapshot_observed_at":"2026-08-04T22:30:33.163371Z","submitted_at":"2025-09-09T01:31:25Z","title":"SafeToolBench: Pioneering a Prospective Benchmark to Evaluating Tool Utilization Safety in LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.07315","snapshot_observed_at":"2026-08-01T13:32:29.176874Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:29.176874Z"},"links":{"cited_paper":"/paper/2509.07315","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:bc60adceb6d8b9d58a0209096aeaabc7bcc3febce66ce2ccdcbabc79f0b8796d","observation_id":"1672d1f7-f840-4c5a-88d9-0909195994ad","resolution":{"observed_at":"2026-08-01T13:32:29.176874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-01T13:32:29.283897Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:29.283897Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:3dee4b27fde1f83d002b2f9a76c65c50069b5c573d14b7402035b0ec9b4b1e05","observation_id":"75d6808a-4b51-4bb6-a7fb-428db49446be","resolution":{"observed_at":"2026-08-01T13:32:29.283897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T13:32:29.381847Z","title":"the tool returned no data","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T13:32:29.381847Z"},"links":{"citing_paper":"/paper/2607.19449"},"observation_digest":"sha256:2edf1e313f660c7a058897be34de80b275bd1ccf51e0f5196ca7f714107179be","observation_id":"864a4ce6-ffbc-4913-b6a3-d864a99c8d07","resolution":{"observed_at":"2026-08-01T13:32:29.381847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19449","last_updated":"2026-07-21T13:23:05Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-01T13:32:27.764242Z","submitted_at":"2026-07-21T13:23:05Z","title":"Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented LLM Agents"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2607.19449."}