{"as_of":"2026-08-09T14:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9baa8ad7f650ea1cff1c075e8e7e33abe5b7308aea3ce2f8eda2c08a968f58a0","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T12:01:17.306903Z","state":"measured"},{"denominator":50,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":50,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.29190/citation-record","integrity":"/paper/2607.29190/integrity","json":"/paper/2607.29190/citation-record.json","paper":"/paper/2607.29190"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:11.495309Z","title":"Dive into","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:11.495309Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:e445301d3c4ac413b7a981fcece45f709720fa4af87ede6fcf790961f4fc901d","observation_id":"a879eed0-7ff8-4f66-91d0-fc7ce5195806","resolution":{"observed_at":"2026-08-03T12:01:11.495309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:11.649474Z","title":"Measuring the Permission Gate: A Stress-Test Evaluation of","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:11.649474Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:ccc8fe61174db39797e2932745c78beb0887ee564e7622087a16432522e54122","observation_id":"1e09c8f9-91da-45e1-aa5c-462a092207b6","resolution":{"observed_at":"2026-08-03T12:01:11.649474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:11.722773Z","title":"Proceedings of the 36th International Conference on Machine Learning (ICML 2019) , series =","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:11.722773Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:6c42affa757f4b287a0e68c46ab9d9c6fc0192735020bc1af04ccbd8d5591ebd","observation_id":"ae9fb981-812c-49a5-ad71-06904735362e","resolution":{"observed_at":"2026-08-03T12:01:11.722773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:11.833433Z","title":"Advances in Neural Information Processing Systems 38 (NeurIPS 2025) , year =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:11.833433Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:e3f889b0ba31c69b1195e511c5fdb24e877c25d616944a677ab15c7728b15a36","observation_id":"180e0e3d-19a4-4f75-8bab-f393abd56dcd","resolution":{"observed_at":"2026-08-03T12:01:11.833433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:11.896597Z","title":"Not What You've Signed Up For: Compromising Real-World","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:11.896597Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:154d08c3ec545041cbd0672f2a806a91b08d89793963b64c1aa80d4804de08ed","observation_id":"3a8c4613-99bb-49e3-b5a3-72e67f7689fd","resolution":{"observed_at":"2026-08-03T12:01:11.896597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:12.016492Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.016492Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:02542b3fd8461eaec648ec51812392714ad66035e133d305a0061ed8514d5180","observation_id":"e829f148-d331-435a-b3c5-202b900da40c","resolution":{"observed_at":"2026-08-03T12:01:12.016492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-03T12:01:12.135104Z","title":"Advances in Neural Information Processing Systems 37 (NeurIPS 2024), Datasets and Benchmarks Track , year =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.135104Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:014e68c19ba82e6ac1bcbd897c83fd88f04d2a1fd3c1a3c76b62acdbc34816df","observation_id":"742e4277-9a71-49de-9c24-87fa0d59f084","resolution":{"observed_at":"2026-08-03T12:01:12.135104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:12.203992Z","title":"2023 , eprint =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.203992Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:3e8ea5167466a92ee096e5995caac84055902c0153a32128f98e24f0e0bc9126","observation_id":"5cfba60f-b8a1-4111-bd46-c4376095193d","resolution":{"observed_at":"2026-08-03T12:01:12.203992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:12.287013Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.287013Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:9c2d1d206282045182e822d7b9235abc13504ca65211be06da52a8cd487b0814","observation_id":"5cd3f176-f1d1-48de-b469-ddb81134f15a","resolution":{"observed_at":"2026-08-03T12:01:12.287013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-08-03T12:01:12.373192Z","title":"arXiv preprint arXiv:2403.14720 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.373192Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:bada5ff0dc81ca91ace493ac001eab6ed7a1dada22662d4864b1ae89593953bf","observation_id":"3cc7e371-1487-4b7f-9ab1-d1f439893c4b","resolution":{"observed_at":"2026-08-03T12:01:12.373192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:12.477242Z","title":"2025 , pages =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.477242Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:c9e7d0e683cb665ba6b6c8cd98d05c7625aa42a2eb516c51c6ee254355cc1a52","observation_id":"46295cca-355c-4848-b804-38940f465338","resolution":{"observed_at":"2026-08-03T12:01:12.477242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:12.671208Z","title":"The Instruction Hierarchy: Training","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.671208Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:b437b9310c63e5f56472d4b0a3070c745a5368ec9c4688248ee91d7da7f86820","observation_id":"0eed6f56-8045-45a0-9112-07393b4b84eb","resolution":{"observed_at":"2026-08-03T12:01:12.671208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-03T12:01:12.843494Z","title":"arXiv preprint arXiv:2503.18813 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:12.843494Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:3c2bff3fd05558f932531a18db5b6706361850b21c2bd341d1401a8fecd2488e","observation_id":"9fc54a5c-9b7c-435c-b5f5-34d41ac8ac23","resolution":{"observed_at":"2026-08-03T12:01:12.843494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:13.001497Z","title":"and Hashimoto, Tatsunori , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.001497Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:656e9365222ca32e5032f65496d4cc8765ff8e7af22743608a371f3f77e85c1b","observation_id":"407c9188-46f3-4179-8712-feac1de5de95","resolution":{"observed_at":"2026-08-03T12:01:13.001497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:13.160676Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.160676Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:2ee34c5b91ebc0c75b9b7e660543ef7de0fb53d6376fab7d2e6e22d862bd311d","observation_id":"9041f01b-0c75-4434-8990-4b569b378192","resolution":{"observed_at":"2026-08-03T12:01:13.160676Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-08T10:31:54.102871Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-03T12:01:13.263106Z","title":"2026 , publisher =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.263106Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:ee3f4cd8397111800a55bc1c3c843dd99c25f869485a6050bae2fd2593ec16fb","observation_id":"7bc600cf-6912-4448-b7f8-232140c568e0","resolution":{"observed_at":"2026-08-03T12:01:13.263106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.03992","last_updated":"2026-05-13T14:28:05Z","snapshot_observed_at":"2026-08-07T15:14:23.890711Z","submitted_at":"2025-10-05T01:50:34Z","title":"Quantitative Certification of Agentic Tool Selection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.03992","snapshot_observed_at":"2026-08-03T12:01:13.395253Z","title":"arXiv preprint arXiv:2510.03992v1 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.395253Z"},"links":{"cited_paper":"/paper/2510.03992","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:82e250fa35df5e01c2042a22dd1985fa5642e04ecebd4dde77f1d2ef3f7cd24f","observation_id":"b639c964-1916-40ba-931f-4e07f1acf3bf","resolution":{"observed_at":"2026-08-03T12:01:13.395253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:13.519049Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.519049Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:db353281ebc8f9f0a61cb589746fe3462f8822eef874decbad9e682aa84786fe","observation_id":"a9475ffa-4157-4706-97d3-b8047e5750b8","resolution":{"observed_at":"2026-08-03T12:01:13.519049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:13.732418Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.732418Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:90451110263dca549b2e9cfbefeff0f7bf6d9b0da95f2d73fae86a23a4f2c724","observation_id":"cd52b9b7-b135-42da-9a0b-ca6ff756904c","resolution":{"observed_at":"2026-08-03T12:01:13.732418Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:13.967406Z","title":"2018 , howpublished =","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:13.967406Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:58a914062a89fe5eb92299c77fe9037461fb189d12bb1be72bda219829eadcf5","observation_id":"eb8f1b31-2031-4631-9cb0-51ff716b44a3","resolution":{"observed_at":"2026-08-03T12:01:13.967406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:14.138241Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:14.138241Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:c5bb8b27fea7c9735dee7f0227bac03b4c8cb03d2775f6cadfa2895aa90a855c","observation_id":"7b7a837d-b6db-47ac-a2f1-38f05bc0787f","resolution":{"observed_at":"2026-08-03T12:01:14.138241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:14.249636Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:14.249636Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:91758e3934659204910a66cdfd3cae8b8011fae8fb786c8a069d40cfd7b38b9c","observation_id":"9c7754e4-086e-46bf-a725-35331b3ad7ab","resolution":{"observed_at":"2026-08-03T12:01:14.249636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:14.386233Z","title":", title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:14.386233Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:157dbbd5d58c2d6628b199f3d1c915d3df1203ef809ea25ed5a1f6a0f389a10d","observation_id":"e80bdf07-ecdc-40a1-a414-c961d05d4e9c","resolution":{"observed_at":"2026-08-03T12:01:14.386233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:14.553878Z","title":"and Sun, Jun , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:14.553878Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:fb5b1d3adeddb89adfa6d2fe2ca615a1e5dd3bd6f6d8d52e5188fa9dc90b5d10","observation_id":"d5d109af-82d5-4cd9-a237-0ddcc0d0e592","resolution":{"observed_at":"2026-08-03T12:01:14.553878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15547","last_updated":"2025-04-21T02:10:14Z","snapshot_observed_at":"2026-08-07T16:58:59.881146Z","submitted_at":"2025-03-17T05:27:57Z","title":"Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15547","snapshot_observed_at":"2026-08-03T12:01:14.750400Z","title":"arXiv preprint arXiv:2503.15547 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:14.750400Z"},"links":{"cited_paper":"/paper/2503.15547","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:781cecb86b1fbff83dd31ca39c483f8a583256eb175fe46bc85207b87f93550a","observation_id":"084b4ba0-9031-42b0-81d9-5a74010acf36","resolution":{"observed_at":"2026-08-03T12:01:14.750400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.07564","last_updated":"2025-06-11T03:14:10Z","snapshot_observed_at":"2026-08-08T13:02:06.235147Z","submitted_at":"2025-06-09T09:04:37Z","title":"SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.07564","snapshot_observed_at":"2026-08-03T12:01:14.921424Z","title":"arXiv preprint arXiv:2506.07564 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:14.921424Z"},"links":{"cited_paper":"/paper/2506.07564","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:4edd4a66ac8d1d11e6cddc8bdce011129849d92e2166156fd1e6b906bab18e7b","observation_id":"8c5ba55c-ce98-48bc-8877-1d782033837c","resolution":{"observed_at":"2026-08-03T12:01:14.921424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.10749","snapshot_observed_at":"2026-08-03T12:01:15.088393Z","title":"arXiv preprint arXiv:2606.10749 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.088393Z"},"links":{"cited_paper":"/paper/2606.10749","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:12e3992058c861ea40f65bad646900f2d10e7354388894b180c23872f03f4dc1","observation_id":"d2e2bf3e-2ef9-4a62-ae4f-f17b8d8a4cde","resolution":{"observed_at":"2026-08-03T12:01:15.088393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.263615Z","title":"arXiv preprint arXiv:2602.09757 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.263615Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:960f502dff95a504e19bcd20ca135fba7447ed606e0ce5b72852b875dfd71b80","observation_id":"d046662a-b5eb-41b3-b5b3-5fbc9bcd455c","resolution":{"observed_at":"2026-08-03T12:01:15.263615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.363943Z","title":"arXiv preprint arXiv:2603.19469 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.363943Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:73f75ed6fe423c8585c9c41f6ca9236cd74fcccc2e69beb43f8ea0b20f0c5573","observation_id":"31852ad1-6cef-4ad8-a649-1d2fbc89d960","resolution":{"observed_at":"2026-08-03T12:01:15.363943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.458319Z","title":"A Coin Flip for Safety:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.458319Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:f67a96f9210178bb5b78f04b4db3fb912c73b59c96e2ee0b8e20557c28707617","observation_id":"2586ff5a-9ec1-4b1d-a697-ff3d8c072de6","resolution":{"observed_at":"2026-08-03T12:01:15.458319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.536071Z","title":"14th IEEE International Conference on Machine Learning and Applications (ICMLA) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.536071Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:0ccd66e46e1ec958159cb4f1811027cd31af59f88806410f76717e3eb45ce9ad","observation_id":"2062fd90-c5ed-46d1-b517-a54283f7fa02","resolution":{"observed_at":"2026-08-03T12:01:15.536071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-03T12:01:15.652239Z","title":"arXiv preprint arXiv:2312.06674 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.652239Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:6e1e9aaccd32aca3fe384d1b70c4594d1c71f1c38b5b9d49a1ea95e0a44a2405","observation_id":"9a30fff0-8fe2-46f7-a47f-4ca89bc6db1c","resolution":{"observed_at":"2026-08-03T12:01:15.652239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.747071Z","title":"Advances in Neural Information Processing Systems (NeurIPS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.747071Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:552916555d4e49063366eaa9c9cd699a8d127d3e3a629fe65b38335452249d67","observation_id":"fafff261-19a9-4d2b-898d-5f8b0fd93744","resolution":{"observed_at":"2026-08-03T12:01:15.747071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.812709Z","title":"Proceedings of the 36th International Conference on Machine Learning (ICML) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.812709Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:d3de2d6dc8a56027a7a9fe50d97264e73aff6edc1dc77ac0976c50774464a8fd","observation_id":"63870aee-f3f1-40fd-8e00-a924577593ab","resolution":{"observed_at":"2026-08-03T12:01:15.812709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.893626Z","title":"Zico , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.893626Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:14e3a106946f52226ea4c51c66911874f5a419bb7ca3fd80836ae6141d83f1aa","observation_id":"108a6146-8e61-45fa-87d1-ffeef63f6054","resolution":{"observed_at":"2026-08-03T12:01:15.893626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:15.960645Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:15.960645Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:05efecf17ca707d5b8a3e5ed39745c26443018ab00f49461fd8b1ebddd9813c8","observation_id":"1d35431b-1534-4da6-af01-107fb23b3d44","resolution":{"observed_at":"2026-08-03T12:01:15.960645Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.063689Z","title":"Advances in Neural Information Processing Systems 31 (NeurIPS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.063689Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:b850cc4229efabfa939d1b32cd77b2943b2e97030def1d657f7bf6c0164db4d3","observation_id":"591b822e-dde8-4a77-831d-6c27a5db7cef","resolution":{"observed_at":"2026-08-03T12:01:16.063689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.167596Z","title":"International Conference on Learning Representations (ICLR) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.167596Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:e1bf2477924dc94db04755c5ca2cb51694af214e384bb3ce4a69da652a835893","observation_id":"5ea79958-5ed0-4f2f-9993-cc958a8c3edf","resolution":{"observed_at":"2026-08-03T12:01:16.167596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.255277Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.255277Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:fd1bc4d18ec728afe7ca6085c857f3ca92164310ffdf8f458b775cdad2d4cfd3","observation_id":"393b27b0-433a-488d-aeee-2e63eecddd83","resolution":{"observed_at":"2026-08-03T12:01:16.255277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.343024Z","title":"Proceedings of the 42nd International Conference on Machine Learning (ICML 2025), PMLR 267 , year =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.343024Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:564a189b6a9e0df221cfd881735ae3e4bba873e000f95545fd88695d866814ca","observation_id":"e7a217ec-65c6-4cf5-99b0-fb38ec475edc","resolution":{"observed_at":"2026-08-03T12:01:16.343024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.416366Z","title":"and Tschantz, Michael Carl , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.416366Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:0d8e089d2d45f76ac1ade15632c40cad038f7d9d0c610a48c8a073899947d3ad","observation_id":"98766511-251a-40cd-9989-6652c1276ad2","resolution":{"observed_at":"2026-08-03T12:01:16.416366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.521872Z","title":"Safe Reinforcement Learning via Shielding , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.521872Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:833a918aa0a7e50778402290349e20af385c4fea0be9826a40b6dec147534693","observation_id":"9bd0b705-ffea-4bdf-b2fa-8e450872ee33","resolution":{"observed_at":"2026-08-03T12:01:16.521872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.647564Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.647564Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:944163ed1afe1a8d4d18a9f76438d91eee71da0523d14c3be312ab6282479822","observation_id":"25a17bf4-7184-4e8f-ad01-89edfaed55a1","resolution":{"observed_at":"2026-08-03T12:01:16.647564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.715118Z","title":"2024 , howpublished =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.715118Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:1835e1106e863895628807442123d771a1cfd4add393b845885489fa644ec01c","observation_id":"3a912178-1208-42dc-b9d9-c238556c2f15","resolution":{"observed_at":"2026-08-03T12:01:16.715118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.807944Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.807944Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:3f902714b3bfdf0dd43fb5b6dc680732378c62b1a386b69b23c75f68bb766f67","observation_id":"dca02ebc-1222-42f4-b165-ce0cafaf7fd0","resolution":{"observed_at":"2026-08-03T12:01:16.807944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.864777Z","title":"Certified Robustness to Adversarial Word Substitutions , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.864777Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:9fd50a7725a2367969baffd2036abd11d94efd8887774114885e5d605a1ffd56","observation_id":"ab1ce1b8-8f35-46db-8db2-c5b9d01d7d58","resolution":{"observed_at":"2026-08-03T12:01:16.864777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:16.941409Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:16.941409Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:b3c424c474f91dadbb25d51bc869899ee72a245b67197768ef683d953510686a","observation_id":"6dc4c99a-2b15-43eb-b951-2c419add2c3d","resolution":{"observed_at":"2026-08-03T12:01:16.941409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:17.040258Z","title":", title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:17.040258Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:e8551c328994e78755311f87cb75c27316228480004b6fe99ed2cf99c97c5cb4","observation_id":"4e3283c8-3f6f-4ad4-8ac6-5b5ac5c6d28b","resolution":{"observed_at":"2026-08-03T12:01:17.040258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:17.161763Z","title":"Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More , booktitle =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:17.161763Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:dae0d39f11f1411de9b391fc58345b3f02f78657df111f3acf105524ef5e3c1f","observation_id":"74200796-5c9f-4194-b1be-5272fc980b11","resolution":{"observed_at":"2026-08-03T12:01:17.161763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T12:01:17.306903Z","title":"and Ferraiolo, David and Kuhn, Rick and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-03T12:01:17.306903Z"},"links":{"citing_paper":"/paper/2607.29190"},"observation_digest":"sha256:45dd3f8e04a019d82791fe8d5c2e65787305b647ee88ed170c960c53f9a7d47a","observation_id":"4ed6622b-54f0-4091-bb31-e5b591e33230","resolution":{"observed_at":"2026-08-03T12:01:17.306903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.29190","last_updated":"2026-07-31T09:11:56Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T23:27:04.069029Z","submitted_at":"2026-07-31T09:11:56Z","title":"CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":48,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 0 inbound Pith citation observations for arXiv:2607.29190."}