{"as_of":"2026-08-08T20:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:644d2fa8785dd43f3cbdeeb716d6cbf137627f384e3a278a269e72533b91df80","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:14:58.564634Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02683/citation-record","integrity":"/paper/2608.02683/integrity","json":"/paper/2608.02683/citation-record.json","paper":"/paper/2608.02683"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.090979Z","title":"arXiv preprint arXiv:2511.21990 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.090979Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:fe067d9150e4a82a2b54273ad64894d89f500a86a728f8269347bf5d8d177071","observation_id":"afb7197a-f188-45d3-bcb2-05259d4f7dc9","resolution":{"observed_at":"2026-08-07T00:14:56.090979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.166560Z","title":"arXiv preprint arXiv:2510.02373 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.166560Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:d274aa6a01660a2750f2e88cabc9282bfaced5df41be00efc56ab501ddb7471f","observation_id":"40cc3a29-9212-44ad-af56-09b22fb3e56e","resolution":{"observed_at":"2026-08-07T00:14:56.166560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.506597Z","title":", author=","venue":null,"work_id":"8da8802d-6de5-4a6c-9a02-c5e5e3db5994","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.240616Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:f8ff9b5752464e189ecf31579a6216f264cef6e1d3c23e89b1cc8d80edca4cee","observation_id":"8d2c7d24-0bb3-46b8-9581-2047b59b82a2","resolution":{"observed_at":"2026-08-07T00:15:01.584028Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.11749","last_updated":"2026-06-20T02:00:57Z","snapshot_observed_at":"2026-08-07T22:06:09.253538Z","submitted_at":"2026-02-12T09:24:50Z","title":"AIR: Improving Agent Safety through Incident Response","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.11749","snapshot_observed_at":"2026-08-07T00:14:56.319130Z","title":"arXiv preprint arXiv:2602.11749 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.319130Z"},"links":{"cited_paper":"/paper/2602.11749","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:a57c05f4d06149847889336e7581dc2f58edc65fe6e17ffbcb47a8e5a9c6b15d","observation_id":"906efac7-b59b-4994-97b8-8d566dedf967","resolution":{"observed_at":"2026-08-07T00:14:56.319130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.396646Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.396646Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:bc2257c2e0739e6e8bffa31de8da07bbaac42295181d9c073f8f1e38d2e5093c","observation_id":"9326f6b4-d499-4951-ba63-cbd0ffa9dd24","resolution":{"observed_at":"2026-08-07T00:14:56.396646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.349956Z","title":"2025 , howpublished =","venue":null,"work_id":"c72ccb72-e4c5-4ae4-acb8-3319a822e2c2","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.481763Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:61506d7110af617e950f181320d70a9eb76e360d6f30f42215218be59d0de88d","observation_id":"ee551d2b-0e54-48d2-98df-eed99961d73b","resolution":{"observed_at":"2026-08-07T00:15:01.418016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.103236Z","title":"2024 , howpublished =","venue":null,"work_id":"4a507550-14fb-425a-8f5a-58b67dcb2e68","year":2024},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.556667Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:4b0dce680f9cf2abe0ffd416e3cea123997fae8ae9b95ed7b4960d8b2e86a210","observation_id":"b5a1c539-f314-42aa-9d25-26aee460be6d","resolution":{"observed_at":"2026-08-07T00:15:01.215182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.934992Z","title":"2022 , note =","venue":null,"work_id":"d7ac1338-f42f-4cc9-ab92-650db1f7e81f","year":2022},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.629451Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:434c26fce25972918ef13eba6c9f9be329abd5b70b3185c9f07503ecb43c52df","observation_id":"4d0cb8da-7b9a-47e9-83cd-49033d268016","resolution":{"observed_at":"2026-08-07T00:15:00.987343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.693891Z","title":"Proceedings of the 36th annual acm symposium on user interface software and technology , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.693891Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:cfc97d856847e228550b21f888f69590f8b4e8f2aa093561f4148ee1836d050d","observation_id":"c88d3408-781e-4429-8738-71d56c96e533","resolution":{"observed_at":"2026-08-07T00:14:56.693891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.697606Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.697606Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:40e23e1261fbd7dbe38351d6b48ec9c8dcb97c3bb4b59e375424224b28d33554","observation_id":"9b156c2c-1b36-46ad-8c9a-3a7bd6f9dbd9","resolution":{"observed_at":"2026-08-07T00:14:56.697606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.737486Z","title":null,"venue":null,"work_id":"41f1cdc2-a25b-49fa-8421-9777bd6ee4df","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.727896Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:7d77c0cadf7d8bc064abc996091cee7aaf51b0d2d421f332f54721668c48b6cd","observation_id":"d06905fc-b75c-47a3-85fa-476501c3fb17","resolution":{"observed_at":"2026-08-07T00:15:00.821238Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.589895Z","title":null,"venue":null,"work_id":"911d2841-ecb6-4cb7-a723-dd8988ee3274","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.807894Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:e15aaeee9f19707b8feca68584db6db5ec6dacc50cadcc0ed5c03ae188d0ab67","observation_id":"c13e6408-ea05-41dc-bcf9-097721f278ca","resolution":{"observed_at":"2026-08-07T00:15:00.655435Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T00:14:56.877675Z","title":"arXiv preprint arXiv:2312.06674 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.877675Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:f24a260b20bc8fc8d2bc1f33134e7140a3f14318893d8194553082640c7eaf81","observation_id":"5e7a0f68-979c-4ad9-bd7c-8dbe24e3b931","resolution":{"observed_at":"2026-08-07T00:14:56.877675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07875","last_updated":"2024-03-19T16:50:50Z","snapshot_observed_at":"2026-08-06T23:45:57.910675Z","submitted_at":"2023-09-14T17:23:37Z","title":"Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07875","snapshot_observed_at":"2026-08-07T00:14:56.953563Z","title":"arXiv preprint arXiv:2309.07875 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.953563Z"},"links":{"cited_paper":"/paper/2309.07875","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:077b5c6590addc0d234c2f8f4e3af3643c7365572778482498d34ccff10a724b","observation_id":"73fdfbbb-ea83-46f0-b5c7-7113c49022b6","resolution":{"observed_at":"2026-08-07T00:14:56.953563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23020","last_updated":"2025-05-29T03:02:18Z","snapshot_observed_at":"2026-08-08T01:17:46.684635Z","submitted_at":"2025-05-29T03:02:18Z","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23020","snapshot_observed_at":"2026-08-07T00:14:57.011095Z","title":"arXiv preprint arXiv:2505.23020 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.011095Z"},"links":{"cited_paper":"/paper/2505.23020","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:eb6929b73acc08c50c8fae6298408cbb0e4353f58442332b36cf09a48c8fbb7a","observation_id":"c8bd3207-13d8-40dc-b5d4-a773d0407b7b","resolution":{"observed_at":"2026-08-07T00:14:57.011095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.08270","last_updated":"2025-07-11T02:34:16Z","snapshot_observed_at":"2026-08-07T01:31:51.955348Z","submitted_at":"2025-07-11T02:34:16Z","title":"Agent Safety Alignment via Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.08270","snapshot_observed_at":"2026-08-07T00:14:57.067936Z","title":"arXiv preprint arXiv:2507.08270 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.067936Z"},"links":{"cited_paper":"/paper/2507.08270","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:70613d1d91976dbc0310bab77adbba36703c8ccb508a8a6b82be4a752579bfdf","observation_id":"1de972a0-65c9-483d-bc7a-6cef8dca0b61","resolution":{"observed_at":"2026-08-07T00:14:57.067936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.423483Z","title":"2025 , note =","venue":null,"work_id":"82b35ed9-01d8-4097-847c-7765040aa265","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.128934Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:3166d933e7637bd0f16432a2531a95c6ddcb2a4985b4b1bc3aa0bbab0c15dbc4","observation_id":"95b11092-cdbf-4388-b858-3fe9aad23243","resolution":{"observed_at":"2026-08-07T00:15:00.494574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.178184Z","title":"arXiv preprint arXiv:2601.05504 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.178184Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:f3b4d682865da871c99e9d0b7e5726718217c7993e9fdea6d628570b5dec6bd4","observation_id":"4c734725-94af-4a8b-892c-ae544f3cfec2","resolution":{"observed_at":"2026-08-07T00:14:57.178184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.08646","last_updated":"2025-09-10T14:41:07Z","snapshot_observed_at":"2026-08-07T18:57:24.013284Z","submitted_at":"2025-09-10T14:41:07Z","title":"Architecting Resilient LLM Agents: A Guide to Secure Plan-then-Execute Implementations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.08646","snapshot_observed_at":"2026-08-07T00:14:57.241459Z","title":"arXiv preprint arXiv:2509.08646 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.241459Z"},"links":{"cited_paper":"/paper/2509.08646","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:b530819b75b4ad50d2d152709cb1f9a0517d5f7d691f927bc6bf8ae80422466a","observation_id":"06492a6b-8673-4304-a557-553490f5b00a","resolution":{"observed_at":"2026-08-07T00:14:57.241459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.306898Z","title":"arXiv preprint arXiv:2601.10156 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.306898Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ae15525c8b623bf5f4790d22ad2fbd844a23f578ff57990af46b5eafd97fd041","observation_id":"9c60b4ff-b85e-439f-afb6-87156955c3e9","resolution":{"observed_at":"2026-08-07T00:14:57.306898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.367177Z","title":"arXiv preprint arXiv:2602.14281 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.367177Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ff044d1bf441d6210e5cf13374e0a72bc5f62044cebe293c64f9cce667830a34","observation_id":"cdf31f13-865f-4563-8a08-500b063ec190","resolution":{"observed_at":"2026-08-07T00:14:57.367177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.421567Z","title":"arXiv preprint arXiv:2601.04795 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.421567Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:207994eabb75dbd620af066054c74db997f63dfd5e974ca518fbecd9e5146166","observation_id":"facaf944-11d1-4a8a-9198-611c9ad079b7","resolution":{"observed_at":"2026-08-07T00:14:57.421567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-07T00:14:57.485998Z","title":"arXiv preprint arXiv:2601.18491 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.485998Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:199433901cde96f28daec437e6768628ed3ba6ca37256722281486636c157fc6","observation_id":"c4fc9c64-e12d-4d2f-a8c0-625e991591c8","resolution":{"observed_at":"2026-08-07T00:14:57.485998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.00500","last_updated":"2026-08-03T00:31:29Z","snapshot_observed_at":"2026-08-08T19:29:44.414464Z","submitted_at":"2025-08-01T10:24:47Z","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.00500","snapshot_observed_at":"2026-08-07T00:14:57.549105Z","title":"arXiv preprint arXiv:2508.00500 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.549105Z"},"links":{"cited_paper":"/paper/2508.00500","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:8510abb5942a75f164beef51a9d1c5f118f9f2336dbe206e53bc31c1f0f57fb2","observation_id":"347f6691-128f-45ca-b4ba-17257377482a","resolution":{"observed_at":"2026-08-07T00:14:57.549105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02022","last_updated":"2026-05-13T10:22:49Z","snapshot_observed_at":"2026-08-03T03:33:11.193819Z","submitted_at":"2026-04-02T13:26:20Z","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02022","snapshot_observed_at":"2026-08-07T00:14:57.617394Z","title":"arXiv preprint arXiv:2604.02022 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.617394Z"},"links":{"cited_paper":"/paper/2604.02022","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:0c78d24d9994695d8ec1a83f95550a410fe1a411d055b2d76e54843f660b2083","observation_id":"1506c92c-486a-4421-a122-65d19768a590","resolution":{"observed_at":"2026-08-07T00:14:57.617394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.682155Z","title":"arXiv preprint arXiv:2603.28807 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.682155Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:49ae1137a8fb41e33418ce8ad8a2efc48d1d610655dd1297796b7744c0d1614f","observation_id":"8778f5a9-2433-4530-a099-4592f41cd379","resolution":{"observed_at":"2026-08-07T00:14:57.682155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10338","last_updated":"2026-01-15T12:31:52Z","snapshot_observed_at":"2026-07-06T22:41:48.115083Z","submitted_at":"2026-01-15T12:31:52Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10338","snapshot_observed_at":"2026-08-07T00:14:57.758449Z","title":"arXiv preprint arXiv:2601.10338 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.758449Z"},"links":{"cited_paper":"/paper/2601.10338","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:f560e94b34a1ac1489c4cf597a570414ec5ca61fc58db37a054d47f8090debad","observation_id":"37a249f5-c0ea-4e87-bf4b-7ddea907d309","resolution":{"observed_at":"2026-08-07T00:14:57.758449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02837","last_updated":"2026-04-03T07:56:42Z","snapshot_observed_at":"2026-08-02T09:29:53.462573Z","submitted_at":"2026-04-03T07:56:42Z","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02837","snapshot_observed_at":"2026-08-07T00:14:57.852752Z","title":"arXiv preprint arXiv:2604.02837 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.852752Z"},"links":{"cited_paper":"/paper/2604.02837","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:211ec8e9404240627eda3a6d2cd949d113efeaf8fd151aaa2da426f2b0074f3f","observation_id":"0e54de4a-ac97-45d2-a82c-36e4c3d48be5","resolution":{"observed_at":"2026-08-07T00:14:57.852752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.13630","last_updated":"2026-05-11T07:00:12Z","snapshot_observed_at":"2026-07-06T23:01:37.207817Z","submitted_at":"2026-04-15T08:59:00Z","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.13630","snapshot_observed_at":"2026-08-07T00:14:57.920364Z","title":"arXiv preprint arXiv:2604.13630 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.920364Z"},"links":{"cited_paper":"/paper/2604.13630","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:86f04c38ac7614faedf11c1ef2621f0b05a951ca4e1294b8cb197b174cbc8d1b","observation_id":"ff03c969-b1d4-4e84-859b-8b7ab56ad5af","resolution":{"observed_at":"2026-08-07T00:14:57.920364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.233122Z","title":"2026 , eprint=","venue":null,"work_id":"1048aa0f-3fdd-42fc-ac67-4a1856663e78","year":2026},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.975505Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:a3740954043cfb39a053d28f70a9fe669f1f9ecd137e6d9f109b1e3849fcf72d","observation_id":"74633031-927a-4244-969d-952e45893d43","resolution":{"observed_at":"2026-08-07T00:15:00.327745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:58.039136Z","title":"The eleventh international conference on learning representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.039136Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:6262cd5af65b3f5325da72d9d16beed7bad4bdc418b418e11e607f3484d61e19","observation_id":"9eb5d07c-b148-440c-beee-44da24204f79","resolution":{"observed_at":"2026-08-07T00:14:58.039136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.080399Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":"451ba5d3-929a-4983-bfb9-23b32afeb4e3","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.093338Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:8c14dd641e8b5adbc1fe8fda474a6ccb16cfa817a64fb8e31e527ed0239b4ba3","observation_id":"48dd8b98-917d-4cb3-958b-49cd9bd379fe","resolution":{"observed_at":"2026-08-07T00:15:00.117091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.929643Z","title":"2025 , howpublished =","venue":null,"work_id":"5978bf6f-2aff-4110-b878-d7428ca09827","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.182139Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:91b356c0bae3902ed0d4bf4efe556a8852753e02d7daf7dd12e90156ffc21e1d","observation_id":"4d6bdb13-a1b0-412a-a1f3-3492e0a0ae9a","resolution":{"observed_at":"2026-08-07T00:15:00.003644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03574","last_updated":"2025-05-06T14:34:21Z","snapshot_observed_at":"2026-08-07T15:49:30.311074Z","submitted_at":"2025-05-06T14:34:21Z","title":"LlamaFirewall: An open source guardrail system for building secure AI agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03574","snapshot_observed_at":"2026-08-07T00:14:58.268362Z","title":"arXiv preprint arXiv:2505.03574 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.268362Z"},"links":{"cited_paper":"/paper/2505.03574","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:f80921a26072568dd6fd5ae367830f150f803d8108bd5157f0c8a6f90d9207ee","observation_id":"636a8164-b70f-40c7-92c3-bc3565450251","resolution":{"observed_at":"2026-08-07T00:14:58.268362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.744768Z","title":"2026 , url =","venue":null,"work_id":"c16d19ac-70eb-4016-9def-a47a6ef48224","year":2026},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.336718Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ec0f1a648921409088fbd893ece3f2f06abcf1b739ca9143611f0b6b0b23f3b5","observation_id":"a86f9904-1060-486d-ab6f-0d99022bff3e","resolution":{"observed_at":"2026-08-07T00:14:59.820656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:58.410632Z","title":"arXiv preprint arXiv:2412.13178 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.410632Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:0250eabacac7fff548ec5ecd93d0936ba81d554912a496e4764b29cf170ed958","observation_id":"78a9750d-8ab2-4dab-be3b-1167ce6133d2","resolution":{"observed_at":"2026-08-07T00:14:58.410632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.573105Z","title":"IEEE Access , year=","venue":null,"work_id":"c05811b8-c80f-4b84-bbbe-a153f4bd7327","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.498239Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:654f1d8ed5945d0c9f0c0558b25f3f3a24d6218665dcaa3956f8944082b52b0b","observation_id":"d1773241-7f66-4d07-bb8e-648d48b6a0b2","resolution":{"observed_at":"2026-08-07T00:14:59.656281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.432434Z","title":"2025 , eprint=","venue":null,"work_id":"a9b1d52f-f0db-462f-86ad-ec4c6170067d","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.564634Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:54e3c91e2309ca1702365702303f5c0a4c32d1a9698cd73c18ece4b2e319df5d","observation_id":"09d5f75e-b324-43e0-a7a9-4c6e70545759","resolution":{"observed_at":"2026-08-07T00:14:59.516142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T15:17:35.921317Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":27,"verified_exact":0,"verified_fuzzy":11},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2608.02683."}