{"as_of":"2026-08-06T02:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fdcab14224b6d5bf94785a79c3e9ef026f27533728d1c4cf8ca23577fd505749","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T03:01:05.389645Z","state":"measured"},{"denominator":35,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":35,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.25255/citation-record","integrity":"/paper/2607.25255/integrity","json":"/paper/2607.25255/citation-record.json","paper":"/paper/2607.25255"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-02T12:38:54.249632Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-01T03:01:00.491588Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:00.491588Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:82af4543776c8ab9520138c93b3876f433a242675f410f5779493c13f4935826","observation_id":"066969e4-8889-46a2-b97e-aabf0f8f8d0b","resolution":{"observed_at":"2026-08-01T03:01:00.491588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:00.630371Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:00.630371Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:668c84e47ed95d008581d39d943a1b81e090b93f964aa01d12cda9d8279817dd","observation_id":"1f1666b0-e8c7-4fa2-bf80-39bf185725eb","resolution":{"observed_at":"2026-08-01T03:01:00.630371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:00.838366Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:00.838366Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:d98fea1609fb88b19b6da04279e77d67961da2e9502bc8a98d6c38b916f28d46","observation_id":"fe15aace-9116-4236-aa6d-637c86ca64dd","resolution":{"observed_at":"2026-08-01T03:01:00.838366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-01T03:01:00.962750Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:00.962750Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:40b502e0199e08273cb4858feda669689d3728b670df1082cc6993930bbae716","observation_id":"e36e562f-73f1-44d4-a8a8-33a128893b08","resolution":{"observed_at":"2026-08-01T03:01:00.962750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.20965","last_updated":"2025-06-13T22:43:06Z","snapshot_observed_at":"2026-07-06T21:16:36.894196Z","submitted_at":"2025-04-29T17:36:05Z","title":"AegisLLM: Scaling Agentic Systems for Self-Reflective Defense in LLM Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.20965","snapshot_observed_at":"2026-08-01T03:01:01.020484Z","title":"R.; Kailkhura, B.; Goldstein, T.; and Huang, F","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.020484Z"},"links":{"cited_paper":"/paper/2504.20965","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:da1e66317e0b2d4a540eed192b23cb650a6ff977abe13f4a27f3d03852e5ec98","observation_id":"d748325b-4b90-4ad3-a6e2-69d717db0aac","resolution":{"observed_at":"2026-08-01T03:01:01.020484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-01T03:01:01.131934Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.131934Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:ba236a70b11c1bfd961ff016aff2ebff731ec65be303129f3aa45aa0e01889ee","observation_id":"293a6212-7cae-4f9a-bf56-d3a53af48d8c","resolution":{"observed_at":"2026-08-01T03:01:01.131934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.19437","last_updated":"2025-02-18T17:26:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-27T04:03:16Z","title":"DeepSeek-V3 Technical Report","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.19437","snapshot_observed_at":"2026-08-01T03:01:01.247000Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.247000Z"},"links":{"cited_paper":"/paper/2412.19437","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:4a7abbd47fb202438b0158dcf46f135a1c8422720ac42612c90fa4da1b0fbc00","observation_id":"bc248440-8903-4c91-8319-0071d7664af5","resolution":{"observed_at":"2026-08-01T03:01:01.247000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:01.313298Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.313298Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:1c38355fef2fe6f499f533fc9d9c15f9915a168994e091a42677e27dfcc2b013","observation_id":"34280382-9616-46d8-b7ec-49d0427262b9","resolution":{"observed_at":"2026-08-01T03:01:01.313298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:01.426335Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.426335Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:150fd1f4cadc7d6da774ff5e545afb0c9a6d8ebd5d484368e4f40e4ed9b9a2b3","observation_id":"2e93ebdc-df34-4b66-909b-06179305ff7c","resolution":{"observed_at":"2026-08-01T03:01:01.426335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:01.550580Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.550580Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:f606519e349890c91f95a2a920c686cda5ce40ab0a199a2e69464342c15f7fc4","observation_id":"a45adbf7-a929-46a2-bd20-80ffd076bf88","resolution":{"observed_at":"2026-08-01T03:01:01.550580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:01.680381Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.680381Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:0dbab132f6ae93fd99fc5c4f495d1470e68bb5b2bc4945074406e2581b96c9d0","observation_id":"fe653cec-59e1-4204-9013-de8bc7bb1dc5","resolution":{"observed_at":"2026-08-01T03:01:01.680381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.17760","last_updated":"2023-11-02T17:34:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-31T01:09:00Z","title":"CAMEL: Communicative Agents for \"Mind\" Exploration of Large Language Model Society","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.17760","snapshot_observed_at":"2026-08-01T03:01:01.805934Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.805934Z"},"links":{"cited_paper":"/paper/2303.17760","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:e144dc63c6fb17a306c71a30f952f6f5846818f9be071d42e91fb728a77c2214","observation_id":"87d64364-72c8-42fe-99cd-3a3e45a42e8e","resolution":{"observed_at":"2026-08-01T03:01:01.805934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.16765","last_updated":"2024-01-30T06:04:04Z","snapshot_observed_at":"2026-07-06T17:22:15.248410Z","submitted_at":"2024-01-30T06:04:04Z","title":"A Cross-Language Investigation into Jailbreak Attacks in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.16765","snapshot_observed_at":"2026-08-01T03:01:01.988072Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:01.988072Z"},"links":{"cited_paper":"/paper/2401.16765","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:fb08c7e092a482de07694ba52abd5f9f98154f61476595dd42eebd812c8573eb","observation_id":"912ed7b9-016b-4fce-9974-e97950e448cf","resolution":{"observed_at":"2026-08-01T03:01:01.988072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:02.119512Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.119512Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:c4916a1cea9cd5ad1b9f1b192847b07336844fab2c8c3040b34ebebfd612a551","observation_id":"f7ab0a1e-1c48-4ba9-9a15-49ccdcc26d1d","resolution":{"observed_at":"2026-08-01T03:01:02.119512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:02.242076Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.242076Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:8824752a495e79ca75e401299881bc227f95ff36b7d2e8a0c62e4badc9fadb1d","observation_id":"b4b346df-229d-489f-9424-29b16b243bac","resolution":{"observed_at":"2026-08-01T03:01:02.242076Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-01T03:01:02.384615Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.384615Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:7abc09675e330f5fbb4429923781aee17898c5aa228c93301315d2a1f54f750f","observation_id":"83d7fba9-6cea-4ccf-9030-c4bc1f3501c3","resolution":{"observed_at":"2026-08-01T03:01:02.384615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:02.548190Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.548190Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:f6f4b41a847c9ae80af8891787908eed16a159dbb51ee6a8c14229798f4035df","observation_id":"561650cf-bdc5-41c9-b9ea-e780f86727a4","resolution":{"observed_at":"2026-08-01T03:01:02.548190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:02.619357Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.619357Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:ae408c6dd0f7673b96876923c5372fdc081d901dd92d4e6e7580290cbbae2a95","observation_id":"778a313e-bf1c-4547-99e9-df1fa662b2b1","resolution":{"observed_at":"2026-08-01T03:01:02.619357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.02155","last_updated":"2022-03-04T07:04:42Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-03-04T07:04:42Z","title":"Training language models to follow instructions with human feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.02155","snapshot_observed_at":"2026-08-01T03:01:02.734309Z","title":"L.; Mishkin, P.; and Zhang, C","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.734309Z"},"links":{"cited_paper":"/paper/2203.02155","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:f516cf02ecaca69a8945cf746788aaf6402e2bbf4d7cbbab7078b1fc51a4fa08","observation_id":"76d5fb7a-1ede-4a71-952c-b7357b8eb434","resolution":{"observed_at":"2026-08-01T03:01:02.734309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:02.860086Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.860086Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:67c32225f6dd85ab4c5f249aa3c9c8606f88535acbd1c567dc78724fe80fdd43","observation_id":"30e0b61e-2ddb-4a4f-9026-b14fcee85269","resolution":{"observed_at":"2026-08-01T03:01:02.860086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:02.988488Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:02.988488Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:11089096ebbaf38c9660958a8f1ea796d732939ba4030b3390c3d347900fa830","observation_id":"dcf6ef56-52df-4eff-b7d9-c0c80cfeb583","resolution":{"observed_at":"2026-08-01T03:01:02.988488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:03.123330Z","title":"A.; Gaonkar, R.; K \"o pf, B.; Krueger, D.; Paverd, A.; Salem, A.; and Tople, S","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:03.123330Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:97119867e7702de02f48c0a5becce967175cc320d0514a50436489f66ec20162","observation_id":"f0c6a3eb-3c6b-42e6-866c-4c204793b528","resolution":{"observed_at":"2026-08-01T03:01:03.123330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04957","last_updated":"2025-03-06T20:43:14Z","snapshot_observed_at":"2026-07-06T20:48:13.849680Z","submitted_at":"2025-03-06T20:43:14Z","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04957","snapshot_observed_at":"2026-08-01T03:01:03.238335Z","title":"D.; Meade, N.; L \\`u , X","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:03.238335Z"},"links":{"cited_paper":"/paper/2503.04957","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:4c2d013fd1e6b030121e34edf6dcc926da75c1ee9d541ad3c22c6773c5c5e860","observation_id":"04d54f6b-26d3-4148-ba7e-bbcc254877bb","resolution":{"observed_at":"2026-08-01T03:01:03.238335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-08-01T03:01:03.365133Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:03.365133Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:9c0eddcbc5b4a71ced646eb260cd2987257e17bf330d292216211c29ed45b2bb","observation_id":"54fdaf2a-c775-4439-8156-113f4b5717cd","resolution":{"observed_at":"2026-08-01T03:01:03.365133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02483","last_updated":"2023-07-05T17:58:10Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-07-05T17:58:10Z","title":"Jailbroken: How Does LLM Safety Training Fail?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.02483","snapshot_observed_at":"2026-08-01T03:01:03.521920Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:03.521920Z"},"links":{"cited_paper":"/paper/2307.02483","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:f68632b7ab788dbe512c718f4e023c2396f5c5c6a7aa7d1d204f5ef9e000a024","observation_id":"08e16c96-760e-4749-b5b6-7c746557bd35","resolution":{"observed_at":"2026-08-01T03:01:03.521920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-07-31T19:03:03.494918Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-01T03:01:03.706227Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:03.706227Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:460f3740b4eadb0d23c3cfd803ec45e6bae40a6e0de81621a64cfb79e4a0f983","observation_id":"04b0c34c-11b1-404b-9dd2-c9c33f9b7eb3","resolution":{"observed_at":"2026-08-01T03:01:03.706227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-01T03:01:03.860989Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:03.860989Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:e242953f28ed011e5b740677b2a8a2d469c629d84dbeecd787b991597f389397","observation_id":"9f324083-61a9-49fd-ad26-d21ce208bb9a","resolution":{"observed_at":"2026-08-01T03:01:03.860989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:04.023412Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:04.023412Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:6b0a460304188d14fa9e6cd301109a32b98be5e409568041cfd8daa2dc5c30eb","observation_id":"d7a8848c-ae84-4d76-9797-0dc8b9248b6d","resolution":{"observed_at":"2026-08-01T03:01:04.023412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:04.184802Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:04.184802Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:57a43d07329744a45b0e8dfb9061674887edf1d11d262d694c059db284d62240","observation_id":"968cd385-199c-4a28-8081-ba26bce3f4c8","resolution":{"observed_at":"2026-08-01T03:01:04.184802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:04.342402Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:04.342402Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:1f78a40f68236dd1a102fccbf235232484ab086d1005942e370c806757295d50","observation_id":"78b05626-083e-41d5-9820-3a15e1871edf","resolution":{"observed_at":"2026-08-01T03:01:04.342402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.10253","last_updated":"2024-06-27T16:01:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-19T02:19:48Z","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.10253","snapshot_observed_at":"2026-08-01T03:01:04.510093Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:04.510093Z"},"links":{"cited_paper":"/paper/2309.10253","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:8aa4e0be1fd5d7e45031918df55550c0b4feaacc6293b5d49c416d6cd45b2502","observation_id":"bffc5fb4-8ec2-44ca-99ab-d85f78907be9","resolution":{"observed_at":"2026-08-01T03:01:04.510093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04783","last_updated":"2024-11-14T18:14:00Z","snapshot_observed_at":"2026-08-01T19:44:03.973773Z","submitted_at":"2024-03-02T16:52:22Z","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04783","snapshot_observed_at":"2026-08-01T03:01:04.706186Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:04.706186Z"},"links":{"cited_paper":"/paper/2403.04783","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:3e04e20a2d88826016f3a3c2e496ce514edabc8350c2f27b59613fdd55ea7168","observation_id":"df871845-a3d4-4bf0-a2d3-dd431ad15d7c","resolution":{"observed_at":"2026-08-01T03:01:04.706186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-01T03:01:04.949244Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:04.949244Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:26f269b4638588ab0879baa97e65601f94bfc49010065b5f5809b942835bf9f1","observation_id":"0bf33890-f0bd-4a1b-9675-fcbf3357c1a8","resolution":{"observed_at":"2026-08-01T03:01:04.949244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-01T03:01:05.124812Z","title":"Z.; and Fredrikson, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:05.124812Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:875929f330c6c40f704d8c53a2c56fe8b21af8ac39f767a4f684d8a178453cfa","observation_id":"0446b82c-6a33-41d9-ba8f-5264c7d0aa8a","resolution":{"observed_at":"2026-08-01T03:01:05.124812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T03:01:05.389645Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-01T03:01:05.389645Z"},"links":{"citing_paper":"/paper/2607.25255"},"observation_digest":"sha256:475b8259bd1ae2919ad2fe436982859ddb4a877c8d0e413fa144e1d429518a2f","observation_id":"98b6b8b8-1a2c-4ccd-9c92-ea64c5ef64eb","resolution":{"observed_at":"2026-08-01T03:01:05.389645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.25255","last_updated":"2026-07-29T23:58:46Z","latest_version":2,"primary_category":"cs.MA","snapshot_observed_at":"2026-08-05T13:53:40.497260Z","submitted_at":"2026-07-28T03:55:47Z","title":"SafeFlow: Semantic Information-Flow Control for Blocking Malicious Propagation in Multi-Agent Systems"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":35,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 0 inbound Pith citation observations for arXiv:2607.25255."}