{"as_of":"2026-08-07T11:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:aee5d858e9885afbf23923e0fd5507c2d02cec168ab5f3f0074a9cd4c028871f","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:12:27.078558Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.01558/citation-record","integrity":"/paper/2608.01558/integrity","json":"/paper/2608.01558/citation-record.json","paper":"/paper/2608.01558"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.569952Z","title":"2024.System architecture for the 5G System (TS 23.501)","venue":null,"work_id":"be44ec8c-a77c-44e4-bb8b-3e20c4e7ea8c","year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:22.866701Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:06aef7caa0ad68996cbc2900864d9bc612727f43bba1683fa423f837729f5409","observation_id":"d90b0aef-fc35-4176-9847-d71e7c2998a8","resolution":{"observed_at":"2026-08-07T00:13:00.575025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-07-06T22:45:34.674215Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.11327","snapshot_observed_at":"2026-08-07T00:12:22.935267Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:22.935267Z"},"links":{"cited_paper":"/paper/2602.11327","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ec02d0aa9bcd4f02c57c9f7d89f5b89c1c8c648bb94bcd8a219d135ebd2d55ee","observation_id":"508f4b3a-d805-4f3d-8234-47afce6c2e12","resolution":{"observed_at":"2026-08-07T00:12:22.935267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:23.018725Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.018725Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:6daaed76cd18210346fee746e3d240be0034c5c0697e69a3bd3258f1b5f593f5","observation_id":"b7dfa417-2d66-441a-9b2b-2fb93ac7d73e","resolution":{"observed_at":"2026-08-07T00:12:23.018725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:23.119614Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.119614Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:2d0a31f426dffacfa710eb99ac19f550235bee24ceebcbafc586beadfccf6fe6","observation_id":"7655f297-4550-4aee-b806-2a18b97ac2eb","resolution":{"observed_at":"2026-08-07T00:12:23.119614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.27299","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:58.716992Z","title":null,"venue":null,"work_id":"ff1b5138-18ec-4d30-a9df-a05bb6a46473","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.194415Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:aee39dc60d3f7373a1c53b0d636bd0c44094ec826a34b054ce947891e6dddebf","observation_id":"c3facac2-0e00-4c0c-aed9-bbd8c38eb557","resolution":{"observed_at":"2026-08-07T00:12:58.790971Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12784","last_updated":"2024-07-17T17:59:47Z","snapshot_observed_at":"2026-08-07T08:10:22.834939Z","submitted_at":"2024-07-17T17:59:47Z","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12784","snapshot_observed_at":"2026-08-07T00:12:23.283898Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.283898Z"},"links":{"cited_paper":"/paper/2407.12784","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:949363f46a964bd36e28e164492f07fe800dc5877babb2cae889971a59294a13","observation_id":"f332cb43-44ed-47b3-bb15-2d598316e784","resolution":{"observed_at":"2026-08-07T00:12:23.283898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.541123Z","title":"2012.Computer Security Incident Handling Guide (NIST SP 800-61 Rev","venue":null,"work_id":"c97865b5-e9ee-4b7e-8b00-1782ff5686a1","year":2012},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.368163Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:1de747271966d02dbe898c7a6ff97ae56c658f28c0d3f1807a93a0c1f2fb17bc","observation_id":"345b9450-26d8-49f5-97a3-22b13a5d5372","resolution":{"observed_at":"2026-08-07T00:13:00.545974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.527741Z","title":"2025.Securing AI Agents with Cisco’s Open-Source A2A Scanner","venue":null,"work_id":"b151bf91-6c6f-44d2-9ce4-29b2304e587f","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.430931Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:9714e8278fb19891c75eef4f6f1f569ac654d5b2b9460d9826e0abb6b015e948","observation_id":"4982389e-3cb7-4eef-841b-8e46e62152cf","resolution":{"observed_at":"2026-08-07T00:13:00.531905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.513940Z","title":null,"venue":null,"work_id":"57e18549-34b9-4cde-a789-59d73218ac81","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.482516Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:d7e2d946d01395ed353118449a32447a1d071a868794ada343bf2fdc9cba8992","observation_id":"12a6028b-46e2-497f-9099-3e687c51ea92","resolution":{"observed_at":"2026-08-07T00:13:00.518070Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-07-06T17:39:45.571775Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-07T00:12:23.578617Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.578617Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:47e45fbb3d993d312c7f6178ce1b7ea7a0546230ed74583691b94f7e5eb88547","observation_id":"a7a7e11a-186f-4033-a1fb-0de4a6ce2a25","resolution":{"observed_at":"2026-08-07T00:12:23.578617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.23883","snapshot_observed_at":"2026-08-07T00:12:23.625640Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.625640Z"},"links":{"cited_paper":"/paper/2510.23883","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:0cc25b2ccf01bf1b86ffcf012febbce8c9f9f11ade829fa54dd1b97f5c8c4760","observation_id":"b560053b-4adf-47e6-85ef-147adec35fd9","resolution":{"observed_at":"2026-08-07T00:12:23.625640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-06T07:36:52.841128Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T00:12:23.711741Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.711741Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:6c325a2d166504b9762fb1ba4bbba0b670f456f4907c4dcd6e2e9be20c122f68","observation_id":"752afc91-068b-4e94-8e2c-55e86530c623","resolution":{"observed_at":"2026-08-07T00:12:23.711741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T00:12:23.784463Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.784463Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:becdb8de68c231be365abdd91e324e2c27fff04cd586fe8ac49ce242efa3fcc7","observation_id":"0d707773-6112-4200-91d1-82a20796ddbe","resolution":{"observed_at":"2026-08-07T00:12:23.784463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02279","last_updated":"2025-05-23T00:28:09Z","snapshot_observed_at":"2026-07-06T21:18:50.421957Z","submitted_at":"2025-05-04T22:18:27Z","title":"A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02279","snapshot_observed_at":"2026-08-07T00:12:23.867036Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.867036Z"},"links":{"cited_paper":"/paper/2505.02279","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:41a93bd0a75db25111bcfdae747ff155f4d7339f900fdd75b39373029c622c39","observation_id":"0f5ac053-9f9d-4e43-b4f2-62f43889da4c","resolution":{"observed_at":"2026-08-07T00:12:23.867036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.499422Z","title":"2018.MiFID II Articles 17 and 21; RTS 6 Algorithmic Trading","venue":null,"work_id":"26388d8e-7d34-4c4e-8bf2-139ab8dd97a2","year":2018},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.980376Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fe38ea341a8b21279052bf090c1b81f31b05285505462b13cfd4653d87bdf8e0","observation_id":"ed5b273b-06c8-40a4-81ea-7e1a09c5f7d9","resolution":{"observed_at":"2026-08-07T00:13:00.503952Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:24.077540Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.077540Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:7a67493d14eb392160763ff731f3eb48387c13bab2af00f5dba5d8a76474fcb3","observation_id":"76b2a1c9-1e9e-4e20-9bc0-1a529b3408ad","resolution":{"observed_at":"2026-08-07T00:12:24.077540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"ba-p/1235996","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:58.509313Z","title":"2025.Safeguarding AI Agents: An In-Depth Look at A2A Protocol Risks","venue":null,"work_id":"9f6435bb-f4bd-4486-96e3-6a90b3e41bff","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.177719Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:709b0c92ac8befd644d8937e8179b44db950148b7f6144e11291601431a4c164","observation_id":"a97c45a7-0929-471c-ab3a-90dd132c3903","resolution":{"observed_at":"2026-08-07T00:12:58.569959Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.485425Z","title":null,"venue":null,"work_id":"33e8aa81-b445-45e4-887a-8bfdfe0878f7","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.249778Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:620f36ebdfe5b8562c97cda3b64f7fd11e306da31e6d5fe0c5b525e06f02bd0f","observation_id":"b4d4b2f8-ca56-4a56-b4a8-c9e594d47e4d","resolution":{"observed_at":"2026-08-07T00:13:00.489856Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.470504Z","title":"2023.HL7 FHIR Release 5: Workflow Module","venue":null,"work_id":"3ffbb6a9-be2b-48cd-a2f6-fa32b8b918ac","year":2023},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.312520Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:806342a09a6e92b58d11bf30d70b1fe7360634ef0ea58e6dd71f65d548e9d173","observation_id":"3fb1543d-b560-4271-9859-6410d51c2893","resolution":{"observed_at":"2026-08-07T00:13:00.474737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.15579","last_updated":"2026-07-05T22:49:32Z","snapshot_observed_at":"2026-07-12T19:40:44.614247Z","submitted_at":"2026-04-16T23:18:22Z","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.15579","snapshot_observed_at":"2026-08-07T00:12:24.400080Z","title":"Timperley, and Christian Kästner","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.400080Z"},"links":{"cited_paper":"/paper/2604.15579","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:5d88f055f49bfae4ed7a48a2fccc8c3ac28a349b141eda6387a9ac919847a6db","observation_id":"096cf875-d7a9-4935-94c6-3b4e673fa876","resolution":{"observed_at":"2026-08-07T00:12:24.400080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.23995","last_updated":"2026-05-23T04:11:51Z","snapshot_observed_at":"2026-08-03T13:34:24.241754Z","submitted_at":"2025-12-30T05:24:26Z","title":"RepetitionCurse: Measuring and Understanding Router Imbalance in Mixture-of-Experts LLMs under DoS Stress","version":2},"cited_work":{"arxiv_id":"2512.23995","doi":null,"metadata_source":"pith","pith_arxiv_id":"2512.23995","snapshot_observed_at":"2026-08-07T00:12:58.322096Z","title":"RepetitionCurse: Measuring and Understanding Router Imbalance in Mixture-of-Experts LLMs under DoS Stress","venue":"cs.CR","work_id":"d97f9a4e-1bb6-4e1a-bc23-418aab4015a8","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.458193Z"},"links":{"cited_paper":"/paper/2512.23995","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:a762f718ef91f4697ab56cc1130b31a671ee71d4d757cea1ce0962a66e13013c","observation_id":"52e314d6-b13d-4526-b304-b05bfdc6b52e","resolution":{"observed_at":"2026-08-07T00:12:58.362037Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.454289Z","title":null,"venue":null,"work_id":"ece9efa4-adec-49de-b67a-2c83d6df81e0","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.525702Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:20b93e527267adbde3dcc3c7306918bbfe997cd97e0234da006981a88b019a9b","observation_id":"456f57e7-6c97-4e49-ae3e-09d5ecce964c","resolution":{"observed_at":"2026-08-07T00:13:00.459263Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2512.23738","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:42.638434Z","title":null,"venue":null,"work_id":"bf2b3ab3-2bb8-4763-a947-c8f75e3d60a5","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.577229Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fc808e5f62f8683b981385731c299175fbb2165c8b05b61e7df8bea4420e4ec0","observation_id":"e610b514-8243-471d-b14b-65abcb25fd59","resolution":{"observed_at":"2026-08-07T00:12:42.649877Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:10.205203+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:10.205203+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.438042Z","title":"2025.Potential Attack Surfaces in Agent2Agent (A2A) Protocol","venue":null,"work_id":"095d221c-29b8-4930-999e-a5138d1fdcdb","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.663366Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:8861b61351296c9cac695e275558cfa8ccd215ed8a95c566540eb93037a4e9b0","observation_id":"663c4715-075b-4a8b-933e-70c67598f1ee","resolution":{"observed_at":"2026-08-07T00:13:00.442944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:24.716939Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.716939Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:7493a09b060350dc91994c2d76b236831317d70e977e2dd84c56ff3fef887c43","observation_id":"71f63925-21cb-4534-a09f-99c0f9fa8664","resolution":{"observed_at":"2026-08-07T00:12:24.716939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-032-16092-8_28","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:42.464778Z","title":null,"venue":null,"work_id":"76541ad4-a75a-432b-bf5d-7fd0439a852e","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.780186Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:51551bc95ee615375c3b6cedc016b75cdb080fc3fc6fd1892d0e7d274dd2d80a","observation_id":"78243060-5fa4-4890-ae64-9c6f4248e067","resolution":{"observed_at":"2026-08-07T00:12:42.470683Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.422788Z","title":"2025.ACP Joins Forces with A2A Under the Linux Foundation’s LF AI & Data","venue":null,"work_id":"27e471f8-6733-4643-a6b8-8129bc71637f","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.838712Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:03cdf6db584b3c6350eebc146b51837b3ffe908d13c1d739f19005011e42c8f4","observation_id":"eb452181-ee18-4f62-b1ca-0d1bae3a2c5b","resolution":{"observed_at":"2026-08-07T00:13:00.427440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.08704","last_updated":"2025-03-09T06:00:35Z","snapshot_observed_at":"2026-08-07T04:20:13.506661Z","submitted_at":"2025-03-09T06:00:35Z","title":"Life-Cycle Routing Vulnerabilities of LLM Router","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.08704","snapshot_observed_at":"2026-08-07T00:12:24.911258Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.911258Z"},"links":{"cited_paper":"/paper/2503.08704","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:3022d82d152b5c4a742c036d62a84fa084ca9027bed3335e8148595aa1762ec4","observation_id":"6fde1e6d-e018-42c1-87af-c49f61f02043","resolution":{"observed_at":"2026-08-07T00:12:24.911258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.405508Z","title":null,"venue":null,"work_id":"a56141fc-7911-4b4f-9f41-7efee46abf58","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.980670Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:977ba91e5b776fedb73f401e3025504442d44c3d3f3443fda41f62201696a652","observation_id":"77a0b4f7-0765-4890-b4a2-52ac4e864081","resolution":{"observed_at":"2026-08-07T00:13:00.411614Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.386386Z","title":null,"venue":null,"work_id":"c471c60d-11d4-4724-85f8-3e3d01ae0133","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.015079Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ffdb7e59a00f0b89fd3cd060898b50a33ecefef75e9b52084b670b17f0a4fb4f","observation_id":"87e5d589-ed43-460a-8cb5-72f0bc6e0714","resolution":{"observed_at":"2026-08-07T00:13:00.392032Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:25.092502Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.092502Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:acc0f7e7e698c73171df2a43f9e4fe2488f838e3785c1ed67148bc3cfbf21e31","observation_id":"cf032acd-a091-4d9c-909e-04c7a881af85","resolution":{"observed_at":"2026-08-07T00:12:25.092502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-07-06T22:48:26.306802Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.09002","snapshot_observed_at":"2026-08-07T00:12:25.164426Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.164426Z"},"links":{"cited_paper":"/paper/2603.09002","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fc8a577fd32079063230c1c714af72a36023677916669e148ec3b5598424342a","observation_id":"60075151-2517-4ac8-ac33-6151af36fca9","resolution":{"observed_at":"2026-08-07T00:12:25.164426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.360537Z","title":null,"venue":null,"work_id":"8f23bead-15b8-4287-bedb-c0d5c05e0520","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.236137Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:dcaa5e27edc87c02571b83eb041941f756c37b04cf70e24de696e68976fe5754","observation_id":"7ed7363c-916d-4dcb-9bbd-887ab9a97125","resolution":{"observed_at":"2026-08-07T00:13:00.371119Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.342295Z","title":null,"venue":null,"work_id":"e72cd7e0-b302-43c4-903c-929547b5eb4e","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.300553Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:06fa9157003ca2b324a90a08dfe98ab13bbc6e8ca631551c87e94c531b34aa6d","observation_id":"544baad3-4d8c-42f8-a7f7-8094c98cfb95","resolution":{"observed_at":"2026-08-07T00:13:00.347754Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.323361Z","title":null,"venue":null,"work_id":"ccd91dfa-ac1e-4aaf-aafb-cbb435c760c6","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.386968Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:c1cc8c012cf59d712efa2987fc131b3a54bcc0526f7fbe94e5154717ea5188cc","observation_id":"6c6d1120-29b5-4128-9578-f9c013ce9061","resolution":{"observed_at":"2026-08-07T00:13:00.331578Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.300345Z","title":null,"venue":null,"work_id":"fd785b5c-4dbb-4776-b002-40545c6a9e0f","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.453517Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:e7d93b0c5e667e3c670253159450c9e964964b0ab9bdafbec8c81ccde68b82fc","observation_id":"3b43a8ba-78a0-4810-96b4-396a523c4364","resolution":{"observed_at":"2026-08-07T00:13:00.307043Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11418","last_updated":"2026-05-12T02:11:54Z","snapshot_observed_at":"2026-07-06T23:23:16.461539Z","submitted_at":"2026-05-12T02:11:54Z","title":"Under the Hood of SKILL.md: Semantic Supply-chain Attacks on AI Agent Skill Registry","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11418","snapshot_observed_at":"2026-08-07T00:12:25.516024Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.516024Z"},"links":{"cited_paper":"/paper/2605.11418","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:1723eafc63cea310ca7b7608173f05bad09085e07f94b79997af83da53498a5e","observation_id":"5c4db43f-afef-4d0f-bc0e-1af3fed63b7b","resolution":{"observed_at":"2026-08-07T00:12:25.516024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.175312Z","title":"2026.A2A Protocol Security: Authenticating Agent-to-Agent Communi- cation","venue":null,"work_id":"37b85769-3f37-4797-a250-3d260f7f2456","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.610975Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:01b46bd0b260dd066b90fbd0ea0c8d9fc772ff3cd2c5fa28226e6973ed682e74","observation_id":"75121b02-8aed-4888-91cd-87613c0d45a6","resolution":{"observed_at":"2026-08-07T00:13:00.272211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.916353Z","title":null,"venue":null,"work_id":"6fccf71b-b5db-40cf-916c-8d98e612949e","year":null},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.686470Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:3db8f76aeaf7fa83d677fa505963e378dcd96c085efb82fbcdbdb8fe8906cd5a","observation_id":"446a917b-4392-4785-8152-6b8b809c6b60","resolution":{"observed_at":"2026-08-07T00:13:00.036365Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-07T00:12:25.831378Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.831378Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:4db82cf593d898ceecd46362452673b87f50f92042183e7f31de5c33e5503bba","observation_id":"6d5755eb-7184-4249-bc1f-95add8c6fd6c","resolution":{"observed_at":"2026-08-07T00:12:25.831378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-07T00:12:25.895446Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.895446Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:4894ad4667ccf80ac52f2a1b164e72e03e30c38ce341cb9bb2ee27569f3857be","observation_id":"32663088-c234-4639-84e0-42d246b24447","resolution":{"observed_at":"2026-08-07T00:12:25.895446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.15022","last_updated":"2026-04-16T13:51:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-16T13:51:48Z","title":"Route to Rome Attack: Directing LLM Routers to Expensive Models via Adversarial Suffix Optimization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.15022","snapshot_observed_at":"2026-08-07T00:12:26.015766Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.015766Z"},"links":{"cited_paper":"/paper/2604.15022","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:5233a6618f27bc0f8053bdb10cbf09089569a701ef0834ab9649e4a75c27423e","observation_id":"ed50bcb4-1f05-445a-b2ce-2b59540e69d4","resolution":{"observed_at":"2026-08-07T00:12:26.015766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.687833Z","title":"2025.Linux Foundation Announces the Forma- tion of the Agentic AI Foundation (AAIF)","venue":null,"work_id":"84c39d9d-9220-48d1-aebd-43e421b021bf","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.121588Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:2147cc23579cef58e93edd57ab568a033355673fba957c4cdda5adaa852cb074","observation_id":"57a63382-f3dc-43ee-8317-8b52ef0cdab6","resolution":{"observed_at":"2026-08-07T00:12:59.835938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.163967Z","title":"2025.Linux Foundation Launches the Agent2Agent Protocol Project to Enable Secure, Intelligent Communication Between AI Agents","venue":null,"work_id":"01be303c-64ce-45d0-ac70-1f18fc47ba70","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.296684Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:bd4201d456ecb53b4fb85eaa59307cdbd8f8b4a003eb7f418dbbbdfec6b0b33e","observation_id":"8679f679-8ad9-410a-8543-f962ff3dd360","resolution":{"observed_at":"2026-08-07T00:12:59.269986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.391386Z","title":null,"venue":null,"work_id":"4aba34e9-77dc-4669-881d-7c9d8114d0e1","year":null},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.211036Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:781ae49d36fdd0ad0d355b57ec0894497af119a6c06ee56b48d1a55994b81edf","observation_id":"21ad1643-490a-4954-a7ff-b87eb2d7bfad","resolution":{"observed_at":"2026-08-07T00:12:59.543610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-07-06T20:57:47.748881Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-08-07T00:12:26.491944Z","title":"Poskitt, and Jun Sun","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.491944Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:874508d89dc9ba95ac71862f16e5effc035b81fe8087407cbb22cc38b1b780d5","observation_id":"84c6b314-84ef-488c-8ddd-afc663ba51d0","resolution":{"observed_at":"2026-08-07T00:12:26.491944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:58.934356Z","title":null,"venue":null,"work_id":"69dd1193-9eba-4d97-b483-2d5960e6bb35","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.391388Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:06d06fd99632637af9b6f2484bbd6cd52249a1197b22fc082b3feb0b7bc9703e","observation_id":"30284983-2ca0-436a-9563-ea2437dc1589","resolution":{"observed_at":"2026-08-07T00:12:59.017385Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:26.677481Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.677481Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:dac532b7b6729301274f90b3cfc93fcc7409bb494d148f411acc468b12ce36d1","observation_id":"36cfab86-09f9-4d41-beae-26d34d1865e7","resolution":{"observed_at":"2026-08-07T00:12:26.677481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.00500","last_updated":"2026-08-03T00:31:29Z","snapshot_observed_at":"2026-08-06T23:23:55.284621Z","submitted_at":"2025-08-01T10:24:47Z","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.00500","snapshot_observed_at":"2026-08-07T00:12:26.587196Z","title":"Poskitt, Jiali Wei, and Jun Sun","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.587196Z"},"links":{"cited_paper":"/paper/2508.00500","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:e9796d9640796e6210b63eec0f791eccc70fab35fc0cd9824f2e6121522d9770","observation_id":"1867f1c6-7164-4a3b-ad41-b75d7b65c53e","resolution":{"observed_at":"2026-08-07T00:12:26.587196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22884","last_updated":"2024-10-30T10:25:35Z","snapshot_observed_at":"2026-08-05T11:41:53.973122Z","submitted_at":"2024-10-30T10:25:35Z","title":"Stealing User Prompts from Mixture of Experts","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22884","snapshot_observed_at":"2026-08-07T00:12:26.839942Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.839942Z"},"links":{"cited_paper":"/paper/2410.22884","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:1fc8d38a97cd78ec55c651776aad4bcc7c4e738e252127cdc57745f5a1b6af15","observation_id":"b46de631-1721-4aa0-8f88-30252ed74380","resolution":{"observed_at":"2026-08-07T00:12:26.839942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.02946","last_updated":"2026-05-01T11:54:55Z","snapshot_observed_at":"2026-07-31T02:35:59.178763Z","submitted_at":"2026-05-01T11:54:55Z","title":"RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.02946","snapshot_observed_at":"2026-08-07T00:12:26.741411Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.741411Z"},"links":{"cited_paper":"/paper/2605.02946","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:b54ef0a6b3f8b13c05f190204ba27370310e71f4ee0a50531f3fdedf43379372","observation_id":"6b32b77d-b644-4426-be8a-c43df23e9368","resolution":{"observed_at":"2026-08-07T00:12:26.741411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:27.004844Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:27.004844Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:cb9498e410fcd484d49c9135eb2cbecb54a81d408bd9663bc7c51f3c9a628226","observation_id":"6baedb92-ac0c-4dd5-a071-338cecee1a3b","resolution":{"observed_at":"2026-08-07T00:12:27.004844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.21380","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:42.984307Z","title":null,"venue":null,"work_id":"01e84f68-dc50-48bb-b50a-ef1a6a753077","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.925470Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:13485fccf14fda293f7458a0db901d5645d44b0974d79f5440e5e1611ad2a2d3","observation_id":"364c5f77-8357-4899-aab5-bf48bd693a52","resolution":{"observed_at":"2026-08-07T00:12:42.992528Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T00:12:27.078558Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:27.078558Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:b77c0157a60b63a23190a7b75fa59e0b555f6de1bd0e6d205c37dd0da78c262c","observation_id":"b762fbc8-2f22-4c04-afaf-36ca9dbed0c2","resolution":{"observed_at":"2026-08-07T00:12:27.078558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.01818","last_updated":"2025-01-03T14:03:14Z","snapshot_observed_at":"2026-07-06T20:16:13.411201Z","submitted_at":"2025-01-03T14:03:14Z","title":"Rerouting LLM Routers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.01818","snapshot_observed_at":"2026-08-07T00:12:25.735180Z","title":"InConference on Language Modeling (COLM)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.735180Z"},"links":{"cited_paper":"/paper/2501.01818","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:4803b10cffce10948dcf00f7f5a9a7ae9e7ffa4d2f905ec9ab957446777064a9","observation_id":"08950bca-1daa-4dde-8a86-4f1e282ff083","resolution":{"observed_at":"2026-08-07T00:12:25.735180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T00:07:02.767228Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":39,"verified_exact":6,"verified_fuzzy":10},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2608.01558."}