{"as_of":"2026-08-22T10:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9c581fa59f8199334cf4e3802c4d4e154fc84bb521dc104c7892d74aa2fe4101","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T06:40:05.441176Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.21824/citation-record","integrity":"/paper/2607.21824/integrity","json":"/paper/2607.21824/citation-record.json","paper":"/paper/2607.21824"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:01.218016Z","title":"Formal Analysis and Supply Chain Security for Agentic AI Skills.arXiv preprint arXiv:2603.00195, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.218016Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:ef3aa4e81b85df903d2026f1f816c7faf148f6158be7118b86e04b07f7d7fb23","observation_id":"1ca4b081-6830-411b-9770-2630a03a6a08","resolution":{"observed_at":"2026-08-01T06:40:01.218016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:01.345716Z","title":"Checking for Race Conditions in File Accesses","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.345716Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:14c9efa62cb9eb6e67f0fb004ece461ba9d842815e2602a86756fcd2b7faed22","observation_id":"f02079ae-9a42-4878-9d76-6c3aca0f938f","resolution":{"observed_at":"2026-08-01T06:40:01.345716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:01.484157Z","title":"Are Aligned Neural Networks Adversarially Aligned? InAdvances in Neural Information Processing Systems, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.484157Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:a0f3b6076c27f9ea289b0510345bcb3e87f80b341977047ad3364372c5c77331","observation_id":"20ac2ad7-3aae-4c6e-ac4a-6d4d174e5187","resolution":{"observed_at":"2026-08-01T06:40:01.484157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.08790","last_updated":"2026-06-07T19:12:55Z","snapshot_observed_at":"2026-08-19T10:02:29.939754Z","submitted_at":"2026-06-07T19:12:55Z","title":"RAILS: Verification-Native Clearing For Agentic Commerce","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.08790","snapshot_observed_at":"2026-08-01T06:40:01.596509Z","title":"RAILS: Verification-Native Clearing for Agentic Commerce.arXiv preprint arXiv:2606.08790, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.596509Z"},"links":{"cited_paper":"/paper/2606.08790","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:3afd4dad43021978d17a1e04de63c6735a9b864ca1fa14b442e88351bb1d62ee","observation_id":"500ccea6-7aaf-4fe8-b460-f8c2cba8a492","resolution":{"observed_at":"2026-08-01T06:40:01.596509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:01.762451Z","title":"AgentDojo: ADynamicEnvironmenttoEvaluatePromptInjection Attacks and Defenses for LLM Agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.762451Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:0fe07aef3071b42e9b2a2edb26779d2ef06a8e39a440b65fb46791dde3c18440","observation_id":"c3f0e639-0266-480a-80b0-4423fd5c5fd3","resolution":{"observed_at":"2026-08-01T06:40:01.762451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.20570","last_updated":"2026-04-26T09:26:57Z","snapshot_observed_at":"2026-08-11T12:33:10.871233Z","submitted_at":"2026-04-26T09:26:57Z","title":"Infrastructure for the Agentic Web: Gap Analysis and Architecture from the Agentverse Platform","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.20570","snapshot_observed_at":"2026-08-01T06:40:01.894598Z","title":"Infrastructure for the Agentic Web: Gap Analysis and Architecture from the Agentverse Platform.arXiv preprint arXiv:2606.20570, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.894598Z"},"links":{"cited_paper":"/paper/2606.20570","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:f3937b8240d6d42c57388b09bc18d458834d5b1f98e766fbfa96e0f2fd386f59","observation_id":"7261f8c9-edc4-4406-9c0b-b19750ecd7a4","resolution":{"observed_at":"2026-08-01T06:40:01.894598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.00749","last_updated":"2025-07-17T08:34:37Z","snapshot_observed_at":"2026-08-16T12:49:13.380267Z","submitted_at":"2025-04-30T22:17:13Z","title":"Coral Protocol: Open Infrastructure Connecting The Internet of Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.00749","snapshot_observed_at":"2026-08-01T06:40:01.984135Z","title":"Georgio, Caelum Forder, Suman Deb, Andri Rahimov, Peter Carroll, and Önder Gürcan","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:01.984135Z"},"links":{"cited_paper":"/paper/2505.00749","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:5446ac37deedc9d58d6a3176cc63016af5621b387269b73c1de254cf9f119d0f","observation_id":"f1dec875-7a3a-4d73-b58e-e61eb9d652c9","resolution":{"observed_at":"2026-08-01T06:40:01.984135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:02.137748Z","title":"Agent Payments Protocol (AP2): Building a Secure and Interoperable Future for AI-Driven Payments.https://github.com/google-agentic-commerce/AP2, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.137748Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:e58e979b64423636995c3b5b440d290bb7d1d8fdb1afbad88c01fcaa27878880","observation_id":"7a591050-d91e-456d-a81b-5e11635c691e","resolution":{"observed_at":"2026-08-01T06:40:02.137748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:02.313878Z","title":"Not What You’ve Signed Up For: Compromising Real-World LLM- Integrated Applications with Indirect Prompt Injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.313878Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:6d4e9fb014c246f0d25772d071fa535692e2a2ea123554a7f531eadae8df854c","observation_id":"771f4d23-1792-4de7-931b-b4114b18a1e9","resolution":{"observed_at":"2026-08-01T06:40:02.313878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.07473","last_updated":"2026-07-21T07:52:02Z","snapshot_observed_at":"2026-08-13T06:04:28.832316Z","submitted_at":"2026-03-08T05:24:16Z","title":"Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.07473","snapshot_observed_at":"2026-08-01T06:40:02.406801Z","title":"Give Them an Inch and They Will Take a Mile: Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems.arXiv preprint arXiv:2603.07473, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.406801Z"},"links":{"cited_paper":"/paper/2603.07473","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:2c875033c403d0e4897a5ba2a52b4bd23999ce6b5e1fc099a6824bc3d35d0cc0","observation_id":"2ac142e1-6130-45a5-8725-0a53b83f6831","resolution":{"observed_at":"2026-08-01T06:40:02.406801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:02.606345Z","title":"The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey.arXiv preprint arXiv:2603.11088, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.606345Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:aa7e48459456fb814268ec682d04a961a35c67e8eb07d6ec26dfbfb7dec388b2","observation_id":"de2bc0a7-ba13-4747-bc49-40a52fbec4ea","resolution":{"observed_at":"2026-08-01T06:40:02.606345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.06738","last_updated":"2026-05-07T14:09:51Z","snapshot_observed_at":"2026-08-16T10:38:35.137634Z","submitted_at":"2026-05-07T14:09:51Z","title":"From Specification to Deployment: Empirical Evidence from a W3C VC + DID Trust Infrastructure for Autonomous Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.06738","snapshot_observed_at":"2026-08-01T06:40:02.663438Z","title":"Trust Without Trusting: A Recomputable Trust Protocol for Autonomous Agents.arXiv preprint arXiv:2605.06738, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.663438Z"},"links":{"cited_paper":"/paper/2605.06738","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:cc4bb23f1aef4efa4132e846fc10e63ce10d72acc47e6e84192cff87512d6864","observation_id":"6fe3fa7a-3a5c-4c85-9b35-7e15973d3b67","resolution":{"observed_at":"2026-08-01T06:40:02.663438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.06148","last_updated":"2026-04-07T17:51:56Z","snapshot_observed_at":"2026-08-15T10:19:56.957242Z","submitted_at":"2026-04-07T17:51:56Z","title":"Who Governs the Machine? A Machine Identity Governance Taxonomy (MIGT) for AI Systems Operating Across Enterprise and Geopolitical Boundaries","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.06148","snapshot_observed_at":"2026-08-01T06:40:02.850169Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.850169Z"},"links":{"cited_paper":"/paper/2604.06148","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:63e77c6a605144e6a30fb02a6e93fa90b15d15b3174b937f306babe825d09c8c","observation_id":"b3e9ba6c-4d6d-429e-8fe9-c36ceefba815","resolution":{"observed_at":"2026-08-01T06:40:02.850169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:02.982305Z","title":"Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2.arXiv preprint arXiv:2602.06345, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:02.982305Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:61e695afff77029e6e17767af07ab5e493aca4d0f5efd46eac6ccfb93a89923f","observation_id":"bc6ecda3-3829-4892-b12c-037ed2044f1e","resolution":{"observed_at":"2026-08-01T06:40:02.982305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:03.095920Z","title":"A402: Binding Cryptocurrency Payments to Service Execution for Agentic Commerce","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.095920Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:97a3b2fbca705c577e66c98a0360c3212553ec2f8b9425faa8f071ea6315b3a4","observation_id":"fdc14c37-7f77-44a4-9fe7-3a10cc24c7be","resolution":{"observed_at":"2026-08-01T06:40:03.095920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.17155","last_updated":"2025-08-23T22:41:49Z","snapshot_observed_at":"2026-08-13T01:44:14.635589Z","submitted_at":"2025-08-23T22:41:49Z","title":"Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.17155","snapshot_observed_at":"2026-08-01T06:40:03.246144Z","title":"Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents.arXiv preprint arXiv:2508.17155, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.246144Z"},"links":{"cited_paper":"/paper/2508.17155","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:afa1c331b8d40f6c651699573cdade8f78a27960c90b01671f1728f68b7da607","observation_id":"f29171f9-2147-4039-a21e-a4ac05cc021f","resolution":{"observed_at":"2026-08-01T06:40:03.246144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.30998","last_updated":"2026-06-22T08:42:13Z","snapshot_observed_at":"2026-08-15T00:54:25.961907Z","submitted_at":"2026-05-29T08:31:18Z","title":"Free-Riding the Agentic Web: A Systematic Security Analysis of x402 Payments","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.30998","snapshot_observed_at":"2026-08-01T06:40:03.420296Z","title":"Free-Riding the Agentic Web: A Systematic Security Analysis of x402 Payments.arXiv preprint arXiv:2605.30998, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.420296Z"},"links":{"cited_paper":"/paper/2605.30998","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:68b0313e5c1ad5f33a61a96771458287f77f83bd33be35900e446c94f59b72b4","observation_id":"046f499d-b895-4f70-bb19-593ae2b418ec","resolution":{"observed_at":"2026-08-01T06:40:03.420296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.08407","last_updated":"2026-04-09T16:06:41Z","snapshot_observed_at":"2026-08-10T22:13:58.063933Z","submitted_at":"2026-04-09T16:06:41Z","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.08407","snapshot_observed_at":"2026-08-01T06:40:03.504298Z","title":"Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain.arXiv preprint arXiv:2604.08407, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.504298Z"},"links":{"cited_paper":"/paper/2604.08407","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:71975fc03ea4a8c016201a42308bd0910d9208c92dfc57fd354de8647d511464","observation_id":"3ef72035-d3b9-4574-a742-32663dd8bf2d","resolution":{"observed_at":"2026-08-01T06:40:03.504298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10338","last_updated":"2026-01-15T12:31:52Z","snapshot_observed_at":"2026-08-20T05:43:02.471919Z","submitted_at":"2026-01-15T12:31:52Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10338","snapshot_observed_at":"2026-08-01T06:40:03.645279Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale.arXiv preprint arXiv:2601.10338, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.645279Z"},"links":{"cited_paper":"/paper/2601.10338","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:d98f768f118f8a71450064ee55f01d470a776c04aa85a2868e461df81e7efa62","observation_id":"9d6b30b7-61ef-4e46-9e26-2f25fd5a86fc","resolution":{"observed_at":"2026-08-01T06:40:03.645279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.24322","last_updated":"2026-06-23T08:57:50Z","snapshot_observed_at":"2026-08-11T06:27:13.828770Z","submitted_at":"2026-06-23T08:57:50Z","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.24322","snapshot_observed_at":"2026-08-01T06:40:03.701789Z","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non- Malleable, Origin-Bound Authority with Machine-Checked Guarantees.arXiv preprint arXiv:2606.24322, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.701789Z"},"links":{"cited_paper":"/paper/2606.24322","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:d427ddccacbab3671076ead77caebbe9fc9deb4890b537bebee4465953a66273","observation_id":"3fd7ff8a-5407-4024-80f2-de82c6b4696c","resolution":{"observed_at":"2026-08-01T06:40:03.701789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:03.813181Z","title":"Security Analysis of Agentic AI Com- munication Protocols: A Comparative Evaluation.ACM Transactions on AI Security and Privacy, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.813181Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:9e797e6bab39c2cf362446fcc1d0a6db340f6d0e200b72c055761047cc224cc6","observation_id":"2d89cd2b-f2f6-4af1-abea-7cdfa2eb6bac","resolution":{"observed_at":"2026-08-01T06:40:03.813181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.15367","last_updated":"2026-05-01T15:12:59Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-15T01:55:40Z","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.15367","snapshot_observed_at":"2026-08-01T06:40:03.894317Z","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce.arXiv preprint arXiv:2604.15367, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.894317Z"},"links":{"cited_paper":"/paper/2604.15367","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:55b4a8fbc7f7b6ce04cebaf76c1cac714460be273c995cca76cb2b67808cb134","observation_id":"08744510-f20d-4c37-8684-84e8c52b0109","resolution":{"observed_at":"2026-08-01T06:40:03.894317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03309","last_updated":"2026-05-26T12:39:40Z","snapshot_observed_at":"2026-08-13T12:31:35.891337Z","submitted_at":"2026-05-05T02:56:31Z","title":"Cryptographic Registry Provenance: Structural Defense Against Dependency Confusion in AI Package Ecosystems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03309","snapshot_observed_at":"2026-08-01T06:40:03.976295Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:03.976295Z"},"links":{"cited_paper":"/paper/2605.03309","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:86258effdf52be4a36d0c247589e7bcde67925b07e0bfac31416da99c3c00854","observation_id":"6b684b1c-d64a-4f90-8586-666fed2030c3","resolution":{"observed_at":"2026-08-01T06:40:03.976295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.063144Z","title":"OWASP Top 10 for Large Language Model Applications.https: //owasp.org/www-project-top-10-for-llm-applications/, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.063144Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:600f7d08f2e68cffd6b49f0e7fb3e17bdb9bb3c204918c52053c99062e208d3f","observation_id":"258a4422-911c-4a33-8749-5c27b073efa9","resolution":{"observed_at":"2026-08-01T06:40:04.063144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.184481Z","title":"MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems.arXiv preprint arXiv:2603.18063, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.184481Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:4ed33748c72ea0cbaafab4963442554044cbd5cdaf8a592f8f09ff9b47e7440e","observation_id":"0a32ce56-5e9a-4007-99c6-8e3845a35bd6","resolution":{"observed_at":"2026-08-01T06:40:04.184481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.348139Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.348139Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:8b5f1644fff5cb27e31930d8560966529f0fcc1125c920695368d318698628ab","observation_id":"d431bb7f-adbb-4bae-8bdb-1873d98083a1","resolution":{"observed_at":"2026-08-01T06:40:04.348139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.466255Z","title":"Before the Tool Call: Deterministic Pre-Action Authorization for Au- tonomous AI Agents.arXiv preprint arXiv:2603.20953, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.466255Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:db849c2e84c73bb9a17690d2ebd3159eaf835095dec47e73923b96be943422df","observation_id":"01868e7b-59c9-4dad-bbaa-ef65efc74579","resolution":{"observed_at":"2026-08-01T06:40:04.466255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.603090Z","title":"Verifiable Credentials Data Model 2.0.https://www.w3.org/TR/ vc-data-model-2.0/, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.603090Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:61f0ab49b88c98c2971fc082322bcc4f0d5b3f8a0d58382bd3db00aaacfa0309","observation_id":"dac5ed72-7366-4d8a-86c2-d1ba27b85182","resolution":{"observed_at":"2026-08-01T06:40:04.603090Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.722836Z","title":null,"venue":null,"work_id":null,"year":1927},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.722836Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:ca54c6248821d48983ab23546ccdb21cd0143b840f86848279a25f76471e5db9","observation_id":"9a6e4b10-b125-4629-a1b4-fc85cfde402a","resolution":{"observed_at":"2026-08-01T06:40:04.722836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:04.865157Z","title":"Wooldridge, Attila Bagoly, Jonathan J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:04.865157Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:e49b1c7c3c3085cc354bb93ec0586b95f2e063c411e326aa50850617c6fca00f","observation_id":"c5c6f0e1-0b2e-4e38-849a-7b4b69663689","resolution":{"observed_at":"2026-08-01T06:40:04.865157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.24118","last_updated":"2026-04-27T07:12:52Z","snapshot_observed_at":"2026-07-30T05:21:40.679953Z","submitted_at":"2026-04-27T07:12:52Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.24118","snapshot_observed_at":"2026-08-01T06:40:05.033819Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization.arXiv preprint arXiv:2604.24118, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:05.033819Z"},"links":{"cited_paper":"/paper/2604.24118","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:5081819b3b64dcb9927898ec7e35998b6f246054643f1a05b06366fd5e01ab3e","observation_id":"14d6e910-31d5-4ba8-be7a-354f80c8d7c1","resolution":{"observed_at":"2026-08-01T06:40:05.033819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.24920","last_updated":"2026-05-22T15:58:46Z","snapshot_observed_at":"2026-08-15T11:39:11.206274Z","submitted_at":"2026-04-27T19:02:08Z","title":"SUDP: Secret-Use Delegation Protocol for Agentic Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.24920","snapshot_observed_at":"2026-08-01T06:40:05.156704Z","title":"SUDP: Secret-Use Delegation Protocol for Agentic Systems.arXiv preprint arXiv:2604.24920, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:05.156704Z"},"links":{"cited_paper":"/paper/2604.24920","citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:6e95a663bfc1a00cd50f7176e62623d2558a22d125eabccfd1abe8001bf5ae76","observation_id":"380b12e1-e1c5-4088-b511-b3dbddead718","resolution":{"observed_at":"2026-08-01T06:40:05.156704Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:05.324541Z","title":"research-key-2026","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:05.324541Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:849ffb27c6bc32c338a4bdbf07725af9cc7c44620d576843a73aee1e31f88038","observation_id":"6b5d295e-822e-4380-ac14-c1ca2879b0f9","resolution":{"observed_at":"2026-08-01T06:40:05.324541Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T06:40:05.441176Z","title":"ts \" : ts ,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T06:40:05.441176Z"},"links":{"citing_paper":"/paper/2607.21824"},"observation_digest":"sha256:1d9a0bf074d75fd95e1a969e8b037051db55253530db9f64f5750f8bfc63a2d9","observation_id":"ac83c8b5-8a19-41db-ae0d-b79c0f5d9f05","resolution":{"observed_at":"2026-08-01T06:40:05.441176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.21824","last_updated":"2026-07-23T21:21:01Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-20T00:32:00.793437Z","submitted_at":"2026-07-23T21:21:01Z","title":"Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":33,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2607.21824."}