{"as_of":"2026-08-18T09:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c01a48780b75e6bcabaf62daf95283a0083bebed8629b413aecef57d2a0f3ad6","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:21:10.198301Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.00718/citation-record","integrity":"/paper/2608.00718/integrity","json":"/paper/2608.00718/citation-record.json","paper":"/paper/2608.00718"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.050150Z","title":"A survey on large language model based autonomous agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.050150Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:d747aacb05d108bfa6cfa4f9fcea60077477ae547de102fcffd44fd20e82b702","observation_id":"9c75200f-a698-4f47-a64a-f0bf7187bcca","resolution":{"observed_at":"2026-08-15T15:21:10.050150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.055930Z","title":"Autogen: Enabling next-gen llm applications via multi-agent conversations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.055930Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:5b2c83042ede7ce7684ecb9dccd02a2ceb8471be2a43ad59225cf90014983c4d","observation_id":"7ad6c78e-05b6-4f3a-97df-5de191dd9add","resolution":{"observed_at":"2026-08-15T15:21:10.055930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.692464Z","title":"Langchain,","venue":null,"work_id":"10cd115f-de97-4a2a-8f86-41992ed52776","year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.061043Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:a9315608bc63023e7912fa885b126e187b21fc33360314b1833ef8cddf02748d","observation_id":"19b79064-35aa-4ac1-945f-86014d68d124","resolution":{"observed_at":"2026-08-15T15:21:10.697928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.066037Z","title":"Gaia: a benchmark for general ai assistants,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.066037Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:aaf9461c1589f0215b2e35a4d49cfe6724eb4f0e17a97d1bbcc281f7635f6cef","observation_id":"32c978f4-7a71-4808-a16f-9c8b54dfb8ff","resolution":{"observed_at":"2026-08-15T15:21:10.066037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06770","last_updated":"2024-11-11T23:05:04Z","snapshot_observed_at":"2026-08-18T08:11:45.716032Z","submitted_at":"2023-10-10T16:47:29Z","title":"SWE-bench: Can Language Models Resolve Real-World GitHub Issues?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06770","snapshot_observed_at":"2026-08-15T15:21:10.071558Z","title":"Swe-bench: Can language models resolve real-world github issues?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.071558Z"},"links":{"cited_paper":"/paper/2310.06770","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:217c216c4a4f40febc40b96df617756fa51562a754f2aceb7d0969283e8b30ec","observation_id":"f8057482-a793-4683-b741-75b8155fde69","resolution":{"observed_at":"2026-08-15T15:21:10.071558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.662137Z","title":"Agent smith: a single image can jailbreak one million multimodal llm agents exponentially fast,","venue":null,"work_id":"d649fc70-74f2-4bfa-9107-ce333b219f2c","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.077284Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:dc99c77f95a356ccd5241bcc70f4005586c6787093b5cda1f43a0da1b97b9433","observation_id":"9790e6ee-106e-4444-835c-bdb3eb1b8239","resolution":{"observed_at":"2026-08-15T15:21:10.667432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-11T20:32:18.138792Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-15T15:21:10.082569Z","title":"Prompt infection: Llm-to-llm prompt injection within multi-agent systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.082569Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:5e466666c80cc3658e7f5155991c003d5b053c9f417023eb6f4e59a695cc2e4d","observation_id":"032f3d8d-4b5a-4368-a791-26a9cac76b8f","resolution":{"observed_at":"2026-08-15T15:21:10.082569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.644000Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":"9ec6c401-13ad-46af-a271-965fde258055","year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.087640Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:c2ab4f255053e726cc128395c3ec516f527e2f55c3e44f7b0999ee8f1f19d27d","observation_id":"433188f8-48e3-4a14-adb7-f254b4811c27","resolution":{"observed_at":"2026-08-15T15:21:10.649389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.625433Z","title":"{PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large language models,","venue":null,"work_id":"e758824f-f3e1-44da-b2c6-2873cea46798","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.092972Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:dd3bf7efd57caa86d83cfc5d120d9ab967aa595a60cfcd6a9ed4cc41772f7ddd","observation_id":"1d671167-1bc3-4aad-b901-35efc656267a","resolution":{"observed_at":"2026-08-15T15:21:10.632447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-18T09:16:08.549791Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-15T15:21:10.097661Z","title":"The dark side of llms: Agent-based attacks for complete computer takeover,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.097661Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:fb592ddb86abef50f7f5e7da4ffd7471a0113cfc24a5138507e2529b99eb0354","observation_id":"c470a0e1-0f96-4143-adff-26ae77737033","resolution":{"observed_at":"2026-08-15T15:21:10.097661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.607316Z","title":"Trism for agentic ai: A review of trust, risk, and security management in llm-based agentic multi-agent systems,","venue":null,"work_id":"dd153d20-5862-4f96-8904-b942156844ad","year":2026},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.102843Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:a69fd9c9a4ebfd0975e6a68f886abfc481cf55fbfd1528055ba3db5d38465b8d","observation_id":"5c7f2d26-5329-49f3-be99-5d649822860c","resolution":{"observed_at":"2026-08-15T15:21:10.613142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02077","last_updated":"2026-04-29T10:47:33Z","snapshot_observed_at":"2026-08-14T09:14:00.327752Z","submitted_at":"2025-05-04T12:03:29Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02077","snapshot_observed_at":"2026-08-15T15:21:10.107915Z","title":"Open challenges in multi-agent security: Towards secure systems of interacting ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.107915Z"},"links":{"cited_paper":"/paper/2505.02077","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:2dfabb464f3493287859050cc4271e1eab89802f8d95091c129f990ce3e6b11f","observation_id":"16b69702-f144-4a76-9b1f-60b8dd6f9511","resolution":{"observed_at":"2026-08-15T15:21:10.107915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.113080Z","title":"Ai agents under threat: A survey of key security challenges and future pathways,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.113080Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:6eba5d2e85ea3d6317eec0b0694282d44aaad4567a7b1d564112624eb9cd303a","observation_id":"3a7de3e8-c61e-440d-a4d0-7444fa2e6e59","resolution":{"observed_at":"2026-08-15T15:21:10.113080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.117767Z","title":"The emerged security and privacy of llm agent: A survey with case studies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.117767Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:4ae69126d352b2b1d0d46c70f5029286441e44e527ad03e2fbe2d3cf694d9c94","observation_id":"6e71bfcf-8514-47b0-a6c7-9df787256ac9","resolution":{"observed_at":"2026-08-15T15:21:10.117767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.122785Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.122785Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:1515b238924daa50ce3414e2d2741dc0cb4479a3ea7776e52ceed76e5f098ba4","observation_id":"7713eb91-9e44-4cb3-8fae-bbbfeb5cf02b","resolution":{"observed_at":"2026-08-15T15:21:10.122785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.550920Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents,","venue":null,"work_id":"4cb13419-7a59-446a-884d-1d1a259db86d","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.128824Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:b7b04659ba2ffd87aab1f86be4952a673720d14078397f2a30c4b0fd5525c69d","observation_id":"3f8e5408-860e-4838-8009-ea9b2e915428","resolution":{"observed_at":"2026-08-15T15:21:10.556685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-15T15:21:10.136135Z","title":"Agent security bench (asb): Formalizing and benchmarking at- tacks and defenses in llm-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.136135Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:9461af172de752048e83e2c3c5eb0c20059790f7857581f42e9c595d021c1723","observation_id":"16e07227-31ea-42d6-ab06-626635e65dcc","resolution":{"observed_at":"2026-08-15T15:21:10.136135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08638","last_updated":"2025-06-23T21:06:11Z","snapshot_observed_at":"2026-08-16T04:34:23.353569Z","submitted_at":"2025-05-13T14:55:31Z","title":"TRAIL: Trace Reasoning and Agentic Issue Localization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.08638","snapshot_observed_at":"2026-08-15T15:21:10.141337Z","title":"Trail: Trace reasoning and agentic issue localization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.141337Z"},"links":{"cited_paper":"/paper/2505.08638","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:37fc13e275b5006d451a7a994d45ce67b9978195a2c2c3063ea7cb1b0d780838","observation_id":"36c5ff14-0e72-461d-a2be-a9f61fbdf582","resolution":{"observed_at":"2026-08-15T15:21:10.141337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.534577Z","title":"Gpt-5 mini,","venue":null,"work_id":"4ba50061-8fd5-44ed-a3d3-4b2c3a410396","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.146788Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:8b6f436038385854b7d1e08058e2ebcef6be9f829d89cdd0b340a541469330bd","observation_id":"2705ec38-bc05-47ce-b692-4ba22db0802f","resolution":{"observed_at":"2026-08-15T15:21:10.539460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.508182Z","title":"Claude sonnet 4.5,","venue":null,"work_id":"ea3ba0fb-61bc-4317-a418-91f903d2327d","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.151796Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:d631943aeff88c4f5267502c12c746cd7a9873e1bd8969acdbe351b1bbd1ce47","observation_id":"747392b1-ebb6-4342-8549-6fc2c0f8f762","resolution":{"observed_at":"2026-08-15T15:21:10.514039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.489781Z","title":"Kimi k2.5,","venue":null,"work_id":"bdec9bbb-cb7f-432e-a9b0-0404a40c47ce","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.156704Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:d65da16e984827ba1da0037c013164a1b411daf9a682621fec9a7756051cacad","observation_id":"119ae632-4252-4263-b37c-d6b2316ba46c","resolution":{"observed_at":"2026-08-15T15:21:10.495478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.473138Z","title":"Practical byzantine fault tolerance,","venue":null,"work_id":"d1b8f2eb-7709-425d-a81f-6ade50dae3a2","year":1999},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.161477Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:54ced9c41d40b7f9c1c82eb79b604dba6705500fd7a5c724813ab04866bdbd4d","observation_id":"789da312-d8c1-4147-abb6-8a554a5255bd","resolution":{"observed_at":"2026-08-15T15:21:10.478284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08902","last_updated":"2024-08-12T11:33:45Z","snapshot_observed_at":"2026-08-16T13:27:03.447054Z","submitted_at":"2024-08-12T11:33:45Z","title":"Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08902","snapshot_observed_at":"2026-08-15T15:21:10.166487Z","title":"Audit-llm: Multi-agent collaboration for log-based insider threat detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.166487Z"},"links":{"cited_paper":"/paper/2408.08902","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:93b7b7a2bc9f0fe017185fe3d24f24d01554ef0b5814573c77e992e6c1d6a184","observation_id":"44ad6d21-94f7-47b1-b9c7-72acdf0a1d7b","resolution":{"observed_at":"2026-08-15T15:21:10.166487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07791","last_updated":"2024-07-23T01:59:54Z","snapshot_observed_at":"2026-08-16T16:14:48.420207Z","submitted_at":"2024-07-10T16:08:46Z","title":"Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07791","snapshot_observed_at":"2026-08-15T15:21:10.172332Z","title":"Flooding spread of manipulated knowledge in llm-based multi-agent communities,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.172332Z"},"links":{"cited_paper":"/paper/2407.07791","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:6d4e35a8219c676455bc5ae12c24133610c6e8f1a0a89cc62eb9a9d283ec4ea6","observation_id":"94092aae-9710-436a-8486-5647ef7e4673","resolution":{"observed_at":"2026-08-15T15:21:10.172332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.455733Z","title":"Secret collusion among ai agents: Multi- agent deception via steganography,","venue":null,"work_id":"349b0bd8-54d0-423b-9bd0-0520ec7c6552","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.177425Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:5764c61b224e5a918240e1e93493614fdfc22fadcfd83579b0cae17dab106503","observation_id":"224bc76c-c2a3-4e1c-9444-032c718705c2","resolution":{"observed_at":"2026-08-15T15:21:10.462074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.438617Z","title":"Agents under siege: Breaking pragmatic multi-agent llm systems with optimized prompt attacks,","venue":null,"work_id":"c3f623e4-ea9b-4c9f-ac27-33aeb05e9375","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.182557Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:4acea66430628cdfee2672ae0e2664907e225c29403a61621c75e23d625695ce","observation_id":"09799ee7-bede-4133-a95f-4a22a85bdebd","resolution":{"observed_at":"2026-08-15T15:21:10.443889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.418093Z","title":"Psysafe: A comprehensive framework for psychological- based attack, defense, and evaluation of multi-agent system safety,","venue":null,"work_id":"6c11e8a3-70b0-4f7f-82cc-c5bced5d5e39","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.187512Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:7a9d2a1973f8ccd4dc396d9b5531e364320a1ce56fb3e2fd6a366ddd1c90fb41","observation_id":"91332909-a426-4871-a9df-4a28654b5784","resolution":{"observed_at":"2026-08-15T15:21:10.426117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04783","last_updated":"2024-11-14T18:14:00Z","snapshot_observed_at":"2026-08-18T06:55:39.053097Z","submitted_at":"2024-03-02T16:52:22Z","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04783","snapshot_observed_at":"2026-08-15T15:21:10.192438Z","title":"Autodefense: Multi-agent llm defense against jailbreak attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.192438Z"},"links":{"cited_paper":"/paper/2403.04783","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:0df5852e4c6562770e46e54e1c2091d762b36c12784e3e1ebe9f54415136145d","observation_id":"60b68910-3e3b-4683-ad27-bd0fb2648e82","resolution":{"observed_at":"2026-08-15T15:21:10.192438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-15T15:21:10.198301Z","title":"The attacker moves second: Stronger adaptive attacks bypass defenses against llm jailbreaks and prompt injections,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.198301Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:b8affe187474ba54357e3363132c69cf8b2d63f64576857fa62726cdd41396b0","observation_id":"f7b82da2-f717-4841-88c5-1a53ad6b72f0","resolution":{"observed_at":"2026-08-15T15:21:10.198301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T07:27:01.476558Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":13},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2608.00718."}