{"as_of":"2026-08-07T19:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2e27ed3f46cfa7a510a1dd961f9de0fe6d2ef411b8da44e73410f31b2972934d","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T22:13:22.118214Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.01719/citation-record","integrity":"/paper/2608.01719/integrity","json":"/paper/2608.01719/citation-record.json","paper":"/paper/2608.01719"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.597933Z","title":"Communication, Simulation, and Intelligent Agents: Implications of Personal Intelligent Machines for Medical Education","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.597933Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:e890c1855e69d97c34b915193eb4e0d15187bf86542fcffda3b7c0ce188eac1d","observation_id":"c00a2211-d93c-4a15-b768-3809f1eed7eb","resolution":{"observed_at":"2026-08-04T22:13:18.597933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.657559Z","title":"Classification Problem Solving","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.657559Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:100843321c6255b6dc5fae9d902c026c68be89f4924d42ac9f84be3a5b4a1eb2","observation_id":"2d438b8e-fcf4-4e1f-92ac-50e0ec2fcba4","resolution":{"observed_at":"2026-08-04T22:13:18.657559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.733317Z","title":", title =","venue":null,"work_id":null,"year":1980},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.733317Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:b4fc6fb0e6b326281ab24d3a9fe1ce719dae40df4f0888b3cd8f377f9b09edd4","observation_id":"5ca71fa0-7996-4884-ab5d-7958d745d46a","resolution":{"observed_at":"2026-08-04T22:13:18.733317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.792081Z","title":"New Ways to Make Microcircuits Smaller---Duplicate Entry","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.792081Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:5a832d755ed47d1fe222ae7a89640205ff52b7891984681c468d8d22ebe58dce","observation_id":"b49f5527-0e75-409b-be76-b79183525448","resolution":{"observed_at":"2026-08-04T22:13:18.792081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.834906Z","title":"Clancey and Glenn Rennels , abstract =","venue":null,"work_id":null,"year":1984},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.834906Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:a1837089334f799ecd3cc5dab67c807e501ba34bf063a7b87c6630044e1a1819","observation_id":"b04603ee-6c3f-4406-8f73-7fded48fc11a","resolution":{"observed_at":"2026-08-04T22:13:18.834906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.890327Z","title":"and Rennels, Glenn R","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.890327Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:86bdb0e1c661c9ef1fae8ff1bf69076d6ba203fecf2ea8026f74da895fc44b03","observation_id":"555d28d0-4e86-45f5-b4fb-8333ab5a3bf6","resolution":{"observed_at":"2026-08-04T22:13:18.890327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.939553Z","title":"Poligon: A System for Parallel Problem Solving","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.939553Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:a25563c9ca66833f43f92222f62d28a3bc1c0e7cb1ca03ab8223fdca1f5c4eb3","observation_id":"ec4abf05-546d-407a-ba4c-d58a842fe463","resolution":{"observed_at":"2026-08-04T22:13:18.939553Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:18.989615Z","title":"Transfer of Rule-Based Expertise through a Tutorial Dialogue","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:18.989615Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:a1ad50a79cb0bf90743fdfa1e2f5f12493eb843f8db57279f82a263dcc08418b","observation_id":"65d7ee51-72fa-4cf0-be03-8e4787a00d15","resolution":{"observed_at":"2026-08-04T22:13:18.989615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:19.075924Z","title":"The Engineering of Qualitative Models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.075924Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:18e633f9884c5276e235c04b4885d78ba193268033f23695b491a671b697c539","observation_id":"b1106d75-3cea-4e8c-9621-088fd68c14bb","resolution":{"observed_at":"2026-08-04T22:13:19.075924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:19.114317Z","title":"2023 , eprint=","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.114317Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:0d4ec2f4f27ad38fa3f83c26bd05467f79ca4cc6d45f7f07cff830efdb308db6","observation_id":"acf16123-881e-4ebc-a71a-3f53e326d97c","resolution":{"observed_at":"2026-08-04T22:13:19.114317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:19.218581Z","title":"Pluto: The 'Other' Red Planet","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.218581Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:dc9665b7dcb712368d5e4ffefc168d2fe01a48c25e61ee706e096ec767a03873","observation_id":"cd121f61-ee99-492c-a47c-fd39e7b5b477","resolution":{"observed_at":"2026-08-04T22:13:19.218581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.536235Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for","venue":null,"work_id":"f20ea18e-bbd9-4e11-aca6-7a5143919336","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.341636Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:a0230e8d9e86b8d959799b1b905f1ceb24b1795d25b286b208c47cbb96d88f08","observation_id":"37597e1e-eeef-4340-ad41-e736b9c5dd46","resolution":{"observed_at":"2026-08-04T22:13:25.542102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.520705Z","title":"Communications of the ACM , volume=","venue":null,"work_id":"528878bf-c03b-42f6-a28f-af45725e9f1c","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.425311Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:f6c9a6d570d27819cbb9eacf06e288d5657ff09eae946d60d80bbbbb70ad3126","observation_id":"95a476ca-7879-40e8-8aad-9d129483d2e2","resolution":{"observed_at":"2026-08-04T22:13:25.525489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.504850Z","title":"AgentLeak: A Full-Stack Benchmark for Privacy Leakage in Multi-Agent","venue":null,"work_id":"9cf1046c-91dd-492f-8a61-4c8ca15842b8","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.532946Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:6c0579c26c24b5bf9e9f16a30e26f3970357037eedf0f226aaaeaf084fa7174b","observation_id":"52c299be-be55-470c-a5df-8fc4296264da","resolution":{"observed_at":"2026-08-04T22:13:25.509319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.489471Z","title":"Information-Theoretic Privacy Control for Sequential Multi-Agent","venue":null,"work_id":"8ca5d15c-7d19-467a-93f0-64cb560ea39d","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.614982Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:255dd1ffb6b6ad9dd6eef4569f3afab585c5a63feefd286b4ea949087079f83a","observation_id":"f1cc1965-ace9-46b1-b113-d631d5feb09a","resolution":{"observed_at":"2026-08-04T22:13:25.493927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23643","last_updated":"2025-09-03T12:30:47Z","snapshot_observed_at":"2026-07-06T21:33:02.686798Z","submitted_at":"2025-05-29T16:50:41Z","title":"Securing AI Agents with Information-Flow Control","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23643","snapshot_observed_at":"2026-08-04T22:13:19.726699Z","title":"Securing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.726699Z"},"links":{"cited_paper":"/paper/2505.23643","citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:9151ad863917c854b14044067e4c59d5bfa15590ee4bba216aaf1427df8293a9","observation_id":"6fb16b27-a9e3-49e2-872b-47e291c2a347","resolution":{"observed_at":"2026-08-04T22:13:19.726699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04799","last_updated":"2026-06-08T05:07:52Z","snapshot_observed_at":"2026-08-07T15:49:00.427756Z","submitted_at":"2025-05-07T20:54:43Z","title":"Maris: A Formally Verifiable Privacy Policy Enforcement Paradigm for Multi-Agent Collaboration Systems","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04799","snapshot_observed_at":"2026-08-04T22:13:19.844688Z","title":"arXiv preprint arXiv:2505.04799 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.844688Z"},"links":{"cited_paper":"/paper/2505.04799","citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:3591800f01e6e94ea10532271d2b8f2ad64d355b17789ca58f7f013f40c919c4","observation_id":"37e8df2b-cd0a-4c60-b38c-063b7f407259","resolution":{"observed_at":"2026-08-04T22:13:19.844688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.474686Z","title":"ToolPrivacyBench: Benchmarking Purpose-Bound Privacy in Tool-Using","venue":null,"work_id":"76a69b94-4f5a-4861-8f87-06a3bda7514d","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:19.933734Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:29d3aa444c12e0e7ddd55eda11042a58299497f4a35a06490553f9aa14dc7f22","observation_id":"f4087eb1-1589-4f78-84a8-8709687154fc","resolution":{"observed_at":"2026-08-04T22:13:25.479402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.458141Z","title":"18th IEEE Computer Security Foundations Workshop , pages=","venue":null,"work_id":"9fba6ab9-4573-44bf-8086-e59ff5e7160d","year":2005},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.070606Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:5a7e6eb04b60114300020b9d1a66614f45a0201231dbe1b55a3f6fd3be6e74cf","observation_id":"7e8f7252-b7e4-4e91-b46f-65b6af9882b5","resolution":{"observed_at":"2026-08-04T22:13:25.462846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.442704Z","title":null,"venue":null,"work_id":"c7396cc7-6a7a-471a-a29d-40d9a5119fdb","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.147952Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:d9eac51d2541b890f1288b352ec3afdb135862551d37ca31b5169783df4faed1","observation_id":"d5b41497-c03d-47a4-8565-ad9e65c2f7cc","resolution":{"observed_at":"2026-08-04T22:13:25.447888Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:20.240006Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.240006Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:01e43bdb19e92c126a8929feb781e1d24adea28de968e308768b9aae8692384b","observation_id":"a6f3a0f7-c71f-4f57-acda-2ce3fdb72e0f","resolution":{"observed_at":"2026-08-04T22:13:20.240006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.417715Z","title":", journal=","venue":null,"work_id":"c46937c7-ed49-4ceb-bebf-45506746f4ca","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.371846Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:c1a304ec4ec450f25cb52268ca3c398ce983b07c4a2d23c805addfbb9a5ed50c","observation_id":"424011ba-82c1-4285-98e1-d77e89765fc4","resolution":{"observed_at":"2026-08-04T22:13:25.421905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.402034Z","title":"ACM Transactions on Computer Systems , volume=","venue":null,"work_id":"3d6f6fe6-e432-4a12-8883-54167b2fe55b","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.451795Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:7f040e9d12dfd97521dd43d5cfa372fa1e7230153d784e4654a1b6045b751214","observation_id":"a3a7626c-2040-4c3d-8473-0010f2363907","resolution":{"observed_at":"2026-08-04T22:13:25.407026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.384870Z","title":null,"venue":null,"work_id":"5fbd1c7b-ee06-46c6-adb7-c83fd11c9370","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.573306Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:6983bb550eafb398e64e789e7dbc3881f0b160e40ebd17807f1987725412d257","observation_id":"6b1ef08d-e872-4358-a61d-cb2b73912110","resolution":{"observed_at":"2026-08-04T22:13:25.388851Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:25.244524Z","title":"Washington Law Review , volume=","venue":null,"work_id":"987cbeef-3716-418a-b76b-051baeb1704f","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.724513Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:32d7316b5cf074398e9465699b45538c8fc7eef4d2198ace46bf6b246731f188","observation_id":"b0cac819-c7e1-4baf-a741-8c04002c4b05","resolution":{"observed_at":"2026-08-04T22:13:25.367991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:24.971823Z","title":"Proceedings of the IEEE , volume=","venue":null,"work_id":"2f24c52f-33d8-4797-a8dc-9e2cf4431666","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.796159Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:be15673e246c9ecf22cbd8e4da49cd3d83a1083118645bc30e7e93206dc9d2f4","observation_id":"43ce2380-4617-4321-84cf-a308af5c5abe","resolution":{"observed_at":"2026-08-04T22:13:25.084752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:24.582691Z","title":"Unveiling Privacy Risks in","venue":null,"work_id":"ba81bad4-5905-4be6-86ff-676b84999a80","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.868970Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:45970c95f0da53eecd3eb3c400d9e879d8a80b621b66ab62676f8115c5f17a9f","observation_id":"979a8029-5a0c-48a0-b6c8-b9645c51a6d4","resolution":{"observed_at":"2026-08-04T22:13:24.726254Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:24.188758Z","title":"and White, Ryen W","venue":null,"work_id":"b75b5f5b-2495-4a0a-9b04-c37b2e71cd8b","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:20.988467Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:a1073548f8f4c94b885c26162fcb7cff9cda54cc4671ec5721456c3d741825fb","observation_id":"534bef76-d5b3-402b-8a02-6cf858c6fa7d","resolution":{"observed_at":"2026-08-04T22:13:24.398069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:21.064167Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.064167Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:11fcdd0489e5cad03784b4f8976adba4c90e9a43bf4957b8c030505d91cd32c0","observation_id":"b82f0daf-ce38-45b0-b36e-f91a08096f38","resolution":{"observed_at":"2026-08-04T22:13:21.064167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:24.056218Z","title":"Agent Security Bench (","venue":null,"work_id":"14c24c9d-839c-4d97-9a51-daf6d75e1acf","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.114066Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:2b96d705b1eef52cc589cc2c0f5556d2db9b4b68a1620f8328a634c47653f458","observation_id":"59f1fe40-fdf5-48b9-808f-5adc184a7f9f","resolution":{"observed_at":"2026-08-04T22:13:24.095595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:23.940879Z","title":"AgentBench: Evaluating","venue":null,"work_id":"571f2967-87fc-4523-9b80-b81d621ad575","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.179935Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:707ecc55b436f1fc8453a1c812ea2a4d4383b8e427f9ebf1e787a6d691189543","observation_id":"c448ca61-3b2a-41ae-8cb1-92df0414e4af","resolution":{"observed_at":"2026-08-04T22:13:23.990289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:23.782345Z","title":"Identifying the Risks of","venue":null,"work_id":"7828aae0-a398-4039-b2d7-f0f7abc25b93","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.270199Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:c61fce10f10a0e61b39c3800d3cbae0005399d8de498b38775266864c4cee51e","observation_id":"e640e605-dd41-4889-88ff-a6b56fcf8e78","resolution":{"observed_at":"2026-08-04T22:13:23.883483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:23.559394Z","title":"Findings of the Association for Computational Linguistics: ACL 2024 , pages=","venue":null,"work_id":"cffd8c01-5a46-4813-ba9e-33782312b911","year":2024},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.355166Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:3c722ef1b06b1762f8a95597243cbf83128b365e8fed28331e52506ae213c5c2","observation_id":"25db83be-9d49-494b-b013-1d8e488593a5","resolution":{"observed_at":"2026-08-04T22:13:23.647296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-07-06T17:06:45.522731Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-04T22:13:21.497262Z","title":"arXiv preprint arXiv:2312.14197 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.497262Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:748dded0fbf9978c161f0cc72f6acbabe04d0002c819bd5718bee2175ce2f098","observation_id":"4e0f8e47-dc08-487c-af06-d08f1e1e2669","resolution":{"observed_at":"2026-08-04T22:13:21.497262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:23.416598Z","title":null,"venue":null,"work_id":"ffa645f0-ec63-45a7-9062-1b59fdc6e8b3","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.613103Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:2c87fe9c38fce3b6f121153fd8088b5bbafce40d06a76a52e86a2bbab18339f0","observation_id":"e76a9ee6-b9b5-4b61-bd0c-36692bec41ce","resolution":{"observed_at":"2026-08-04T22:13:23.469145Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:23.221308Z","title":"Prompt Flow Integrity to Prevent Privilege Escalation in","venue":null,"work_id":"cd644353-56e9-4a6f-8299-06a0b38bb08b","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.721965Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:cbeeba1a0db06957d4f084d9592c76ea0a66304e432efc58b56d52ea9533ca66","observation_id":"2be61f23-181c-4e5b-a30a-ce46cf018b36","resolution":{"observed_at":"2026-08-04T22:13:23.314530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:23.078374Z","title":"Proceedings of the Sixteenth ACM Symposium on Operating Systems Principles , pages=","venue":null,"work_id":"fff74fac-0f2b-470a-904e-851732c9dfdb","year":1997},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.812593Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:c255949802cb4b51e3912ab8fb9a6c5c38d86d3ec8dc422a61582a2588cb244b","observation_id":"94e45f9e-c87d-4625-b0d5-31b4603575c1","resolution":{"observed_at":"2026-08-04T22:13:23.144409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:22.913380Z","title":"and Stoica, Ion and Gonzalez, Joseph E","venue":null,"work_id":"5bf6c8a9-8efd-44c6-94bc-4857dced6a72","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:21.914974Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:32527f3619acce6ecb1053bcb07c98602ac5e934a5bcc7b5d4f145efc20d8579","observation_id":"527eeebd-da92-4809-8613-b88f98dbd59f","resolution":{"observed_at":"2026-08-04T22:13:22.967256Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:22.620545Z","title":"International Conference on Learning Representations , year=","venue":null,"work_id":"2ecb6322-e48f-42f3-815b-9487c1d25203","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:22.006942Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:680f514cfac26a44d3a1c77db96384619c3bdb623d764a15a49495bf402b8052","observation_id":"457e4755-de1d-4ec9-ac7e-da13c9e36fd6","resolution":{"observed_at":"2026-08-04T22:13:22.712945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:13:22.311800Z","title":"30th USENIX Security Symposium , pages=","venue":null,"work_id":"87d93bed-d726-4a4b-b328-4e8ced41c915","year":null},"citing_paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-04T22:13:22.118214Z"},"links":{"citing_paper":"/paper/2608.01719"},"observation_digest":"sha256:d0f37117dcdeaa823cd68ec43b04541f5bf11ce27cf7be83d456e8651252108c","observation_id":"02a4f30c-98da-4d54-a24d-b632d4568c91","resolution":{"observed_at":"2026-08-04T22:13:22.455732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.01719","last_updated":"2026-08-03T05:36:49Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T23:32:57.491630Z","submitted_at":"2026-08-03T05:36:49Z","title":"MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":0,"verified_fuzzy":21},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 0 inbound Pith citation observations for arXiv:2608.01719."}