Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-31T10:25:18.320400Z
Paper Citation Record · LEDGER
As of 11 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 1 inbound Pith citation observation for arXiv:2607.24625.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-31T10:25:18.320400Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-11T06:34:44.6726+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-11T05:56:02.846369Z
A source-named dated measurement, never combined with another source.
Source: pith, observed 2026-08-11T05:56:03.000496Z
55 of 55 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 736822d7-c69a-44ca-9ea3-805803bb5e7e · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 1
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d87beb57-7f71-4980-b6e4-789d7f411574 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2024.Model Context Protocol (MCP) Specification
Reference 2
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 857c00f1-4968-4ca6-844b-88b1788e3d4a · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 3
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2519cf88-6cba-42ae-adde-fd636024b422 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Taylor, Krishnamurthy Dvijotham, and Alexandre Lacoste
Reference 4
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 25c40781-4fcc-4f19-a997-3e13f186ce8e · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 1967.Lattice Theory(3rd ed.)
Reference 5
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1e0bfb9d-1b50-4387-ad16-94de1ef3ec59 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents
Reference 6
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8e7fb7b4-c599-4a38-809c-161b018c303c · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.
Observation 354b14fb-3376-4666-8858-1a4c320b02e1 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Securing AI Agents with Information-Flow Control
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 66f96a41-42e7-4e6f-9463-f66309621e2a · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Defeating Prompt Injections by Design
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ed1c6a41-01bc-413f-afda-f1ea1b4c21b3 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
Reference 10
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation decf9f36-901e-4d08-b6f0-1fda37fdbdc1 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2ef4a230-9c7a-42b9-8f3f-8a24eb29acf8 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 12
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 72af4b8f-6553-40bf-942e-52e8c9dd0279 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 13
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2af2e458-1cdf-4e87-b418-3e3052e0dc33 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback
Reference 14
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fad9a5c7-0d2c-44d0-877b-c75d60c18138 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.
Observation 28744486-3702-4cd5-857e-e4c991e63070 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Goguen and José Meseguer
Reference 16
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a5409f0a-e91b-48ee-be08-7ab2f571cdcd · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 17
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 52fc861f-2bb0-4df9-b160-3412bb430bff · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2026.SMCP: Secure Model Context Protocol
Reference 18
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f641e18b-e95a-476b-b228-103f8655fd41 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training
Reference 19
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d1b40f3a-30c9-4ca8-ab6a-d6a53d17688b · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations
Reference 20
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8cc205a5-3ff6-452b-8f9a-b520c1e717fb · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Jensen and William H
Reference 21
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c02938b6-e6fc-4a06-ae25-5c0fe5f89e73 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 22
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 95680ee0-5893-40b4-8973-ef9edf894448 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 23
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6f63ebfe-f1e7-42be-a4dc-bcf9e0783298 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Frans Kaashoek, Eddie Kohler, and Robert Morris
Reference 24
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 22ae7ad4-2b14-42d1-b280-f2d0ef46685d · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Gonzalez, Haotong Zhang, and Ion Stoica
Reference 25
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0d58e3f1-7a2d-4488-9ca9-5f2407cd6a9b · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 26
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2ddf7dd7-8277-4838-b5b8-1b26295f9315 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents ACE: A Security Architecture for LLM-Integrated App Systems
Reference 27
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 08f666c6-bfe2-4240-a834-2977d9093667 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 28
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b362d773-54be-4fd9-893a-063e69095f3f · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2025.ceLLMate: Sandboxing Browser AI Agents
Reference 29
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4d19128f-4ce6-4f6b-9687-9f6fed825d32 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Miller and Jonathan S
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.
Observation 059b7df6-b078-4cc0-9d10-c51a25cc430a · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Myers and Barbara Liskov
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1e9c341d-7432-43d1-9f00-ef50e7c6d732 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Needham and Michael D
Reference 32
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e0163d9c-e74d-427c-b1a0-5888fe3acc42 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2b32f4d1-45de-410c-a7c4-0a4e2cf236c4 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents MemLineage: Lineage-Guided Enforcement for LLM Agent Memory
Reference 34
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3dfb20f2-7298-4ef2-93c2-9fa6001e79a2 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 35
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 950b4184-2ff3-41ea-a117-ac371f5e0915 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2023.NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 710bf588-c76d-427f-a9a9-577a6a553c8e · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 37
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f8e344a7-6e26-4555-834b-453299a767ff · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 38
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a03d16af-3851-4840-9585-1f95da5567b8 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 39
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 09d9cb12-3ff1-4e53-8147-9890b1ae03d1 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.
Observation 60bc27fc-1824-41ed-a853-bbc65937ec46 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Saltzer and Michael D
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 37d58e06-6ded-498b-80f0-153d91feb3f1 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Schwartz, Thanassis Avgerinos, and David Brumley
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.
Observation a032a7b1-7352-4f70-ae67-999c19670fb7 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Mitchell, and David Mazières
Reference 43
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5d9d309e-7cc6-4c0c-afb0-35b896eb6644 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 44
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 44135f1b-310d-4854-969c-2e9fdf22e45e · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents
Reference 45
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 15970527-ab3d-4dd9-a3b2-0362adf86b9d · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents
Reference 46
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cd58cb66-8bc1-49f6-ad79-fcee7e7dbf29 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents From Agent Loops to Structured Graphs:A Scheduler-Theoretic Framework for LLM Agent Execution
Reference 47
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 100b7c66-a17a-45a0-8f49-f93b425c24cd · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2023.The Dual LLM Pattern for Building AI Assistants That Can Resist Prompt Injection
Reference 48
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8938ffe2-a3c2-48a6-a4f4-3568f54d6e12 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes
Reference 49
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bda3359f-bcdf-41a7-b4e6-93659cba1a58 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 50
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9045eab2-1096-4284-b0d3-6e6456a918d4 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work
Reference 51
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9dad7a4f-d1a1-4aa2-88db-76d8328dd82d · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents SGLang: Efficient Execution of Structured Language Model Programs
Reference 52
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5a18b45f-6601-4a1f-acfe-af4cdcd02b96 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents send the routine email: to all@northwind. example, subject ‘Routine update’, body ‘The scheduled corporate update is complete. ’
Reference 53
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f362ef25-5060-46a4-9ae9-448abaffc082 · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents InFindings of the Association for Computational Linguistics: ACL 2024
Reference 2024
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 75e33d6b-9bc4-4e1e-a2db-bcd93aeca6dd · outbound
Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Tracking Capabilities for Safer Agents
Reference 2026
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d2cbe207-0591-4469-8827-3455c6f9ad2d · inbound
Multi-Agent AI Safety as an Institutional Design Problem Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.