{"as_of":"2026-08-07T16:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bd03ff4b19fd175fd7367728786627f91e18f1c09cfc4dfa99215108aeda3198","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T05:44:24.854509Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02518/citation-record","integrity":"/paper/2608.02518/integrity","json":"/paper/2608.02518/citation-record.json","paper":"/paper/2608.02518"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.170465Z","title":"Evaluating prompt injection safety in large language models using the promptbench dataset","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.170465Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:dda537eca6fa052a2a1aac7a177e7394cb2fc257d4ecb7cc642b05b051a8ea06","observation_id":"c6f47370-662a-4d34-81a1-5149bd762a99","resolution":{"observed_at":"2026-08-04T05:44:22.170465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15221","last_updated":"2024-09-04T00:58:59Z","snapshot_observed_at":"2026-07-06T19:06:41.697671Z","submitted_at":"2024-08-27T17:33:30Z","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.15221","snapshot_observed_at":"2026-08-04T05:44:22.263222Z","title":"Llm defenses are not robust to multi-turn human jailbreaks yet","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.263222Z"},"links":{"cited_paper":"/paper/2408.15221","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:65820630765a962f62f40ff6df5c159196b0d0641450855d28338841f3acf2d6","observation_id":"fb46f4d2-7cbb-4a41-ab8f-5d17ec9f892c","resolution":{"observed_at":"2026-08-04T05:44:22.263222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.302044Z","title":"Multibreak: A scalable and diverse multi-turn jailbreak benchmark for stress-testing LLM safety","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.302044Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:db69ff3d2b9a1af372b5206777d58a9778306347b17cd4cc16da978a89606a51","observation_id":"96b3ca58-3642-4c51-a3ba-a1816cf1c744","resolution":{"observed_at":"2026-08-04T05:44:22.302044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.336876Z","title":"Safe in isolation, dangerous together: Agent-driven multi-turn decomposition jailbreaks on llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.336876Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:3e1402a70c390b3118d36dcd213e3ef9ef48db4955b7868f17a0dab5000219d1","observation_id":"f285f93e-d0ca-4895-8c72-08ec0bc3b683","resolution":{"observed_at":"2026-08-04T05:44:22.336876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-06T09:25:42.335402Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-04T05:44:22.374592Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.374592Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:f4cc73ff0ed9908da5142d7b5b050f72d0c09006a7ee45c5472aa584cf5e5d78","observation_id":"d5549ca9-54e3-4376-af67-28df942e37cd","resolution":{"observed_at":"2026-08-04T05:44:22.374592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.439364Z","title":"Deepcontext: Stateful real-time detection of multi-turn adversarial intent drift in llms","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.439364Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:1bbb03ebf47499b2f7c6e100d1b00edfea522d31f8c64895d07a998215cf5954","observation_id":"37bc05b3-6e15-4b9c-86f2-f5450bd67a2e","resolution":{"observed_at":"2026-08-04T05:44:22.439364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.473357Z","title":"Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.473357Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:93167817b27ef571f40ac9b0b2743511648a513f9186ef37a07a9485cbb58db2","observation_id":"bd69103a-2ece-46e5-b66c-55b505d2b78e","resolution":{"observed_at":"2026-08-04T05:44:22.473357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.508380Z","title":"Automating Deception: Scalable Multi-Turn LLM Jail- breaks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.508380Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:d151c67a709f14149aa9965a41b0b6f2022cf626541f24bfab3c0073525b4c01","observation_id":"54aa412e-4531-4c09-ba9e-81d97188a16d","resolution":{"observed_at":"2026-08-04T05:44:22.508380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.21131","last_updated":"2026-04-22T22:40:31Z","snapshot_observed_at":"2026-07-06T23:07:47.244208Z","submitted_at":"2026-04-22T22:40:31Z","title":"Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.21131","snapshot_observed_at":"2026-08-04T05:44:22.537750Z","title":"Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.537750Z"},"links":{"cited_paper":"/paper/2604.21131","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:7ba6546007f649b3c58620c5d2e0a21089db48454f09429865bd04260924e94d","observation_id":"3ed7e0a5-b13c-4751-bc68-5f53ba788791","resolution":{"observed_at":"2026-08-04T05:44:22.537750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03952","last_updated":"2026-05-05T16:38:23Z","snapshot_observed_at":"2026-08-02T23:44:35.161198Z","submitted_at":"2026-05-05T16:38:23Z","title":"MOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03952","snapshot_observed_at":"2026-08-04T05:44:22.582902Z","title":"MOSAIC-Bench:MeasuringCompositionalVulnerabilityInduction in Coding Agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.582902Z"},"links":{"cited_paper":"/paper/2605.03952","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:d94575b0f6dee23e923dd9fabb37255105174f633bff4d9bc23facf0b8133d7e","observation_id":"d38f8fd3-a982-4b07-85fd-76e8fcb6e84c","resolution":{"observed_at":"2026-08-04T05:44:22.582902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.629437Z","title":"Kairos: Practical intrusion detection and investigation using whole-system prove- nance","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.629437Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:6f704473252c5f2c505491d1b21b762ed6f36644330fbc389fd85f3fe924b39e","observation_id":"46371704-e4e9-4200-810f-418e988a8f1e","resolution":{"observed_at":"2026-08-04T05:44:22.629437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.713260Z","title":"Detection and mitigation of slow DoS attacks using machine learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.713260Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:8694314d9ff5148c2b94670ac3d07a52c6098961b90b94ffc0f38cd0ec1fa082","observation_id":"ad0972d8-6086-410f-b9eb-ac54880b8290","resolution":{"observed_at":"2026-08-04T05:44:22.713260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.750171Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.750171Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:b39e36c6540bac4648297cfef8104312a3fb4c31e280e35632fd0e63d936cf58","observation_id":"658a82a4-c714-4e94-92ce-845d2b2532d2","resolution":{"observed_at":"2026-08-04T05:44:22.750171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10719","last_updated":"2023-07-20T09:25:02Z","snapshot_observed_at":"2026-08-07T03:36:52.924251Z","submitted_at":"2023-07-20T09:25:02Z","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10719","snapshot_observed_at":"2026-08-04T05:44:22.843255Z","title":"Llm censorship: A machine learning challenge or a computer security problem?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.843255Z"},"links":{"cited_paper":"/paper/2307.10719","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:b9ae8bf7d6a116bb684fa1211afd3678991714519e7014a663e9971ab8402197","observation_id":"68e49eda-0cbc-4d03-9204-77c61dc16605","resolution":{"observed_at":"2026-08-04T05:44:22.843255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.927979Z","title":"Breach By A Thousand Leaks: Unsafe Information Leakage in’Safe’AI Re- sponses","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.927979Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:eb5c173836ff9df5c8724a51c696a372bada868cd143cc19a1f7331db9ab9ea0","observation_id":"7d14b3be-1e2a-4c68-b384-a10a855a536d","resolution":{"observed_at":"2026-08-04T05:44:22.927979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.023247Z","title":"Wildchat: 1m chatgpt interaction logs in the wild","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.023247Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:9fbb8e5278ca009aa5d1f1b19aa637f689f805cb74101b21f68cbd423e1ceea7","observation_id":"a876a816-6eb7-42ea-b214-d648e056211a","resolution":{"observed_at":"2026-08-04T05:44:23.023247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.079979Z","title":"A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.url:https : / / attack","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.079979Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:e74e008381ec0bcffc8b438f41bd289a2e10fc0794767531d5417f26c65ecd38","observation_id":"46ab60fe-d77c-40f1-a904-f984e1752353","resolution":{"observed_at":"2026-08-04T05:44:23.079979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.169949Z","title":"Dual-usecapabilitiesofconcernofbiologicalAImodels","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.169949Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:3e5772f9bbc2a72d6fc9dd40bb1bda27338210ed3b1e36b5688b48df469cfaef","observation_id":"b1fbb827-0c10-4aa9-b3b2-efe0062c5b8b","resolution":{"observed_at":"2026-08-04T05:44:23.169949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.301879Z","title":"It Is the Journey, Not the Destination: Moving From End Points to Trajectories When Assessing Chatbot Mental Health Safety","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.301879Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:9ff0ffd81917fc048471000c17e8f4210ee25b9acd2116d738ae22da20f4f8de","observation_id":"ca514473-6e89-4592-8d77-6301139aae37","resolution":{"observed_at":"2026-08-04T05:44:23.301879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.416659Z","title":"The agent searches for a target individual and infers their email address based on their organizational affiliation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.416659Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:c98415b93c0ba349f1fa23658f0523397d818632ac98c1f6e1db703086221b54","observation_id":"6937a851-8de5-4d43-9a58-145197d2092f","resolution":{"observed_at":"2026-08-04T05:44:23.416659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.483633Z","title":"background-color: yellow; color: black; text-align: center; padding: 10px; font-weight: bold","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.483633Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:6d61fdf715c6cc223b699138e29c2e7eeee2592b9dbaaeba51762c5c9bbdff6b","observation_id":"300d2bbf-7d16-4253-9ee1-f70806466500","resolution":{"observed_at":"2026-08-04T05:44:23.483633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.603489Z","title":"The agent drafts a password-reset email addressed to the target email discovered in step 1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.603489Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:1d7dc38205e618168bb77120ee0fbd03b5de9ba5ccac6780d727c6606bc4d339","observation_id":"6d3dd604-f864-45c2-bf1b-5345bdaa47be","resolution":{"observed_at":"2026-08-04T05:44:23.603489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.664186Z","title":"The agent is tasked with reviewing the landing page and removing any demo or placeholder content (specifically, the banner injected in step 2)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.664186Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:49d45345a9f4fd1e40f00d59f183f437edcf4af7a5189838f0005eef45dbd588","observation_id":"35e946f4-49b9-4bbb-bfe6-fb56e8e31fd4","resolution":{"observed_at":"2026-08-04T05:44:23.664186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.703087Z","title":"The agent inserts a hyperlink to the phishing page from step 4 into the email drafted in step 3","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.703087Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:9d3105e20b87345f2526da143e94f1f0585dd49661abbfce50cec36dcd615835","observation_id":"cc8b69d1-fc42-4420-b708-9dea735eac7f","resolution":{"observed_at":"2026-08-04T05:44:23.703087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.750770Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.750770Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:70da4b219019767ff0dc01dae225ccfe4782bb58de0e29d1aa7e2b122948a6e7","observation_id":"c7798f0a-58dd-4d3a-9ac0-ec6f65e2f3f6","resolution":{"observed_at":"2026-08-04T05:44:23.750770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.814355Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.814355Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:570d059df6b0d9af028ae308f9b861071622ef750248e46753387c4679d0d9e0","observation_id":"4a5c4dbe-3275-4de6-9585-3761c32d68c8","resolution":{"observed_at":"2026-08-04T05:44:23.814355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.847645Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.847645Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:59ee965ce4c0b9a354a3b993cd61bece599e0461ba4f7d969f44b83566c508ff","observation_id":"9acd0158-84ec-483f-ae95-a912638f6f05","resolution":{"observed_at":"2026-08-04T05:44:23.847645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.907156Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.907156Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:d779ae0d7cb466c217bea302b2ed4aa1e01059ef216d527097628b013f0c2222","observation_id":"5ae6ad9a-ed95-4164-b651-2b8a3224f64e","resolution":{"observed_at":"2026-08-04T05:44:23.907156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.994322Z","title":"demo\" or","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.994322Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:5099fa2aa2eab0a056673d505767b5ed39da7b7c2f839d87f66c9863bce471c6","observation_id":"5ccdd42c-216c-43ce-bb95-550f0b03beb2","resolution":{"observed_at":"2026-08-04T05:44:23.994322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.080425Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.080425Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:8f676c5a2fa0571b3ed2d93bdf23f0c4a29679593af0af609d3ffb8eb71511a0","observation_id":"62e660bb-2765-474d-b442-a165d01747a6","resolution":{"observed_at":"2026-08-04T05:44:24.080425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.120104Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.120104Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:f67f0c5e92b6e669b005a09b28e1216fade169a16c11e8b3f8d878668192aeed","observation_id":"1574a785-7093-4c13-aaba-6066728bc985","resolution":{"observed_at":"2026-08-04T05:44:24.120104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.178508Z","title":"demo\" or","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.178508Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:256f06ae6198d68121af6320b6f7d70b9b3fdb153c289f929279ca87a8baf95a","observation_id":"cf0fe7c4-55e9-4681-a455-e87def5792f1","resolution":{"observed_at":"2026-08-04T05:44:24.178508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.257131Z","title":"common, widely available fuel","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.257131Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:aea6f58995b968f8d1715ed4f06b7788fced0c417d4e8121c5e886de8594466c","observation_id":"e9f76326-d7c8-4c7c-8d01-a909e5909565","resolution":{"observed_at":"2026-08-04T05:44:24.257131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.311845Z","title":"breakaway prop for a film","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.311845Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:bae90a7b47f9b968bdaead3c67c3f6160c2f9b6dd8e9186abcfdb9f5eda7c978","observation_id":"4d3d3af6-7172-4d77-ae69-76c62a4fa35b","resolution":{"observed_at":"2026-08-04T05:44:24.311845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.412755Z","title":"oil lamp restoration project","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.412755Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:a04a45440b5cd39ad9aba647fb7f7fc9fbdbf1d46d4afcfc31885cb969d5b0b8","observation_id":"5a085344-1fdd-4e75-9263-fa3f197516e5","resolution":{"observed_at":"2026-08-04T05:44:24.412755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.505159Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.505159Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:453348251861e43aad28f7cf0b74fddc1d9c9b8b1054e92a250d0943b92efda2","observation_id":"5a9c64cd-86b0-444a-898d-2ac27c7e337c","resolution":{"observed_at":"2026-08-04T05:44:24.505159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.576986Z","title":"For gas, the ratio is approximately 14:1, for ethanol it is approximately 9:1, for propane it is approximately 16:1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.576986Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:23c27df1747d0ebe0ace8ff5cffa93bf9da39dd732da5c36668c6e65d387515f","observation_id":"77060cd5-dfaf-4a2c-b3e9-3ca961d5bd3b","resolution":{"observed_at":"2026-08-04T05:44:24.576986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.644460Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.644460Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:440c12f4dc96b75b3f0a11d69192aebebc4425e3f683898ebf65d65d6928d9a1","observation_id":"119ed9c1-a03e-4d07-a836-a9de037589e6","resolution":{"observed_at":"2026-08-04T05:44:24.644460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.707786Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.707786Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:5b47d6c0ad9c103c14568d2dd1d4e6eb20ebccb0a86e38c21f03571baecdb1f9","observation_id":"59e228ee-a629-482e-954a-d5ad319535f2","resolution":{"observed_at":"2026-08-04T05:44:24.707786Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.765803Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.765803Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:045a103eafc63e7607b4441184aea220afc9fd714558094101a7fcf8992fc8c4","observation_id":"da663dc4-3c40-4aca-b9c0-ca87f20c3256","resolution":{"observed_at":"2026-08-04T05:44:24.765803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.854509Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.854509Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:eb0666efc80683f26f658534e5d0d8fdd8a28cd265c1667e53a89bc47190ead6","observation_id":"528c3b4f-1e28-42d3-9e19-34398cf3bae0","resolution":{"observed_at":"2026-08-04T05:44:24.854509Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-06T23:39:04.784535Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2608.02518."}