{"as_of":"2026-08-09T11:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5df8fef0ba338b072d70897851407331924caa4af56d640920a6219cc771eb8d","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:59:40.856673Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02018/citation-record","integrity":"/paper/2608.02018/integrity","json":"/paper/2608.02018/citation-record.json","paper":"/paper/2608.02018"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T00:59:39.211103Z","title":"arXiv:2504.11281","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.211103Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:11ce25aeec266e8256a2424777cd30d4d2d97bbf97e90f5eda78f57c4d9da88b","observation_id":"c6e545e5-2312-4aec-81e7-14b2b7e4ff67","resolution":{"observed_at":"2026-08-07T00:59:39.211103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T00:59:39.344088Z","title":"arXiv:2503.18813","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.344088Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:4143a23fb56d0b90752f2f89528471facdba69cd8a011c043b74a0264c6fb44a","observation_id":"fc0d42f9-143a-407f-b676-7447d1e75459","resolution":{"observed_at":"2026-08-07T00:59:39.344088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.13392","last_updated":"2026-06-11T14:23:41Z","snapshot_observed_at":"2026-08-06T06:40:14.278655Z","submitted_at":"2026-06-11T14:23:41Z","title":"MiniMax Sparse Attention","version":1},"cited_work":{"arxiv_id":"2606.13392","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.13392","snapshot_observed_at":"2026-08-07T00:59:41.081226Z","title":"MiniMax Sparse Attention","venue":"cs.AI","work_id":"293f063c-dee9-43d3-af0a-31e0fb57eacb","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.725796Z"},"links":{"cited_paper":"/paper/2606.13392","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:da40a9e0b177efe2f80fb19c221fb09ed5f2231e1c84c0da049ca724f88aed67","observation_id":"08299e70-a016-4e1f-bdb9-6758bdf1aeb1","resolution":{"observed_at":"2026-08-07T00:59:41.192533Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T23:24:16.398221Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-07T00:59:39.874950Z","title":"arXiv:2502.08586","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.874950Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:d9b5e48ec3b1c920337ef87a7cee7d3181655ffe66a6bca89c5077a2f762baf5","observation_id":"f9c7f59c-9fc1-4e6e-b474-ad1fb264f142","resolution":{"observed_at":"2026-08-07T00:59:39.874950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.08005","last_updated":"2026-04-09T09:08:40Z","snapshot_observed_at":"2026-08-07T10:15:18.025155Z","submitted_at":"2026-04-09T09:08:40Z","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.08005","snapshot_observed_at":"2026-08-07T00:59:40.104980Z","title":"Ruan, Y.; Dong, H.; Wang, A.; and et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.104980Z"},"links":{"cited_paper":"/paper/2604.08005","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:ed3b5152d483bd6cefa2a3d5ae75c128351f5ca6264d7a0d9e5741de82865b36","observation_id":"89b4951e-49b9-498b-b772-1d29271513d9","resolution":{"observed_at":"2026-08-07T00:59:40.104980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-07T00:59:40.195526Z","title":"Singh, A.; Fry, A.; Perelman, A.; and et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.195526Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:93261f08f3c1a40734d8a480a6283c3c811bba22c0b18d496d7e6a4e735322df","observation_id":"eb1eaa77-93ae-4b68-aa3b-af0bbdc6e997","resolution":{"observed_at":"2026-08-07T00:59:40.195526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03267","last_updated":"2026-05-01T23:55:43Z","snapshot_observed_at":"2026-08-02T10:52:10.211700Z","submitted_at":"2025-12-19T07:05:38Z","title":"OpenAI GPT-5 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.03267","snapshot_observed_at":"2026-08-07T00:59:40.324404Z","title":"arXiv:2601.03267","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.324404Z"},"links":{"cited_paper":"/paper/2601.03267","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:31d6cf25a45a9dbb41dacdf148aaaa93020e2dea79aa88babd6ae371953a6fc2","observation_id":"bb09119b-add7-40e4-aa93-454e0da504d3","resolution":{"observed_at":"2026-08-07T00:59:40.324404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:42.003924Z","title":"InFindings of the Association for Computational Linguistics: ACL 2024, 10471–10506","venue":null,"work_id":"8845ea0f-21e2-449a-ac03-2780b31dd831","year":2024},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.695151Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:44704d50b82effb080d338c6a7ef2bf843e59e2e45dc8752f1b3c6054233da0f","observation_id":"68d6e4cf-ab8c-4183-b43e-f310b052f6e6","resolution":{"observed_at":"2026-08-07T00:59:42.133925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:41.755975Z","title":"InProceedings of the 63rd Annual Meeting of the Association for Compu- tational Linguistics (Volume 1: Long Papers), 8387–8401","venue":null,"work_id":"12c3b98f-725f-49f4-88ae-0c9b495baf3b","year":2024},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.856673Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:f82fae98b62c63e17248de7f118089c0fe5a51862a53884015d8fde8eca06844","observation_id":"a4234450-0f60-41cd-9218-02b95c1b94a7","resolution":{"observed_at":"2026-08-07T00:59:41.858013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:42.276457Z","title":"InFindings of the Association for Computa- tionalLinguistics:ACL2026,11986–11998.SanDiego,Cal- ifornia, United States: Association for Computational Lin- guistics","venue":null,"work_id":"ae65afe7-02be-4b34-b528-37a9ea31ac71","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.573665Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:8dec0ab3d93e2392c0b5192c820ff005d8b4a0a1199a721c3bc811764191ff2b","observation_id":"19deeb7a-d794-4f53-924a-7747ea87244c","resolution":{"observed_at":"2026-08-07T00:59:42.461591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:40.004103Z","title":"InProceed- ings of the 30th ACM International Conference on Multime- dia,MM’22,3185–3194.NewYork,NY,USA:Association for Computing Machinery","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.004103Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:a8398957df273b86a0caf0b90c399737b293ce10319bad1afa0fbd3ac7c56aac","observation_id":"2090079e-44f3-46cf-9a7a-a44fab98e8a6","resolution":{"observed_at":"2026-08-07T00:59:40.004103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:43.043221Z","title":"InFindings of the Association for Computational Linguistics: EMNLP 2023, 2803–2821","venue":null,"work_id":"85f97b88-73f7-46df-b7a4-3983d74c1d66","year":2023},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.579504Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:44746814b91dbaf6b8100ed9e57f134bf685913b2ae4ac5f70547499f803e63d","observation_id":"a7341e7a-89d0-46d2-bb5d-f5c3ab5033d3","resolution":{"observed_at":"2026-08-07T00:59:43.212515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:42.629835Z","title":"InAdvances in Neural Information Processing Systems, volume 37, 52040–52094","venue":null,"work_id":"e3b9a7e4-61dd-40aa-a72e-9e2a839a90b5","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.428083Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:e680688c607a1c5c68ce29f993fa3757ced961b817b803bce182b4b6d4827e37","observation_id":"a4c2b143-0641-481b-906c-feaccfe668e1","resolution":{"observed_at":"2026-08-07T00:59:42.849898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:39.120990Z","title":"arXiv:2504.14064","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.120990Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:fa652c82dbcae4b310b1a1694024d792a619256c9dec599696d9b53a4d52ea0b","observation_id":"8badb16f-e5e7-4198-8884-3c24f3e7d17b","resolution":{"observed_at":"2026-08-07T00:59:39.120990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28116","last_updated":"2026-05-27T08:09:53Z","snapshot_observed_at":"2026-07-06T23:37:45.223562Z","submitted_at":"2026-05-27T08:09:53Z","title":"MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content","version":1},"cited_work":{"arxiv_id":"2605.28116","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28116","snapshot_observed_at":"2026-08-07T00:59:41.334147Z","title":"MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content","venue":"cs.CR","work_id":"caca0bd5-7adc-45bc-863e-628da1cc8868","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.457930Z"},"links":{"cited_paper":"/paper/2605.28116","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:ff672476fdd66b872b617ff729f7598d5ebd61f77519e1901af94cf005f8f512","observation_id":"5c8e3839-ae4d-44ef-9dfe-7254b92435b5","resolution":{"observed_at":"2026-08-07T00:59:41.483092Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T11:10:38.251132Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":2,"verified_fuzzy":5},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2608.02018."}