{"as_of":"2026-08-07T10:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a82f670a69b79471d5a44d649e9b186c2d7f7b2c61c67a1ac684ba63c5bf3a83","coverage":[{"denominator":85,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":85,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:07:42.432678Z","state":"measured"},{"denominator":85,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":85,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03272/citation-record","integrity":"/paper/2608.03272/integrity","json":"/paper/2608.03272/citation-record.json","paper":"/paper/2608.03272"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.13657","last_updated":"2025-10-26T23:25:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-17T19:04:38Z","title":"Why Do Multi-Agent LLM Systems Fail?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.13657","snapshot_observed_at":"2026-08-05T22:07:41.982048Z","title":"Pan, Shuyi Yang, Lakshya A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.982048Z"},"links":{"cited_paper":"/paper/2503.13657","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:9a9a7fae23fb37603ecdeaa249337a566935468f5119d2461a877ba459e66930","observation_id":"3122d6bc-57cf-4c66-90a3-9e887465d0cd","resolution":{"observed_at":"2026-08-05T22:07:41.982048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.27765","last_updated":"2026-04-09T16:04:48Z","snapshot_observed_at":"2026-08-03T12:37:07.175045Z","submitted_at":"2026-03-29T16:58:29Z","title":"Let the Agent Steer: Closed-Loop Ranking Optimization via Influence Exchange","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.27765","snapshot_observed_at":"2026-08-05T22:07:41.988536Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.988536Z"},"links":{"cited_paper":"/paper/2603.27765","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:0601d04b685c0ff6294a174ea824eaa41fed0014965b0ed71aaf6829b601dae5","observation_id":"b4303ebe-ec30-497d-9ed3-fa9b12059668","resolution":{"observed_at":"2026-08-05T22:07:41.988536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3439729","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.560596Z","title":null,"venue":null,"work_id":"e90d162a-34e4-4d4e-ac01-990533758537","year":2021},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.993906Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:737ec3ff23dafeae1c14905d1b3b23df5abdfa32dde0054a31ee52485f83e9db","observation_id":"72ec97de-6d30-423c-b6e0-48bbfed50b31","resolution":{"observed_at":"2026-08-05T22:07:42.566696Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:41.999411Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.999411Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:a13c743858931aa20e8a63ca8b689048d0a5a89cad548db09f90b435bb8da31a","observation_id":"ef27c86b-ffb0-44fc-894e-ac268c00c6bf","resolution":{"observed_at":"2026-08-05T22:07:41.999411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.04468","last_updated":"2024-11-07T06:36:19Z","snapshot_observed_at":"2026-08-04T17:52:28.620519Z","submitted_at":"2024-11-07T06:36:19Z","title":"Magentic-One: A Generalist Multi-Agent System for Solving Complex Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.04468","snapshot_observed_at":"2026-08-05T22:07:42.005668Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.005668Z"},"links":{"cited_paper":"/paper/2411.04468","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:a91c6b97ec33be0cb5ca83f7a7d8f2a71da2449716b495cb410c3e6297dbcf33","observation_id":"c018b495-1c6b-4b12-a3ee-e29818618b8f","resolution":{"observed_at":"2026-08-05T22:07:42.005668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.010963Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.010963Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:01491285862f51f819d150ce86e6f9f452194a4cd8acf3562ab743b3e683d05a","observation_id":"884ab759-7c05-4ea6-941b-d7397b1f0d57","resolution":{"observed_at":"2026-08-05T22:07:42.010963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.016361Z","title":"Gómez, A","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.016361Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e41f4743e4f9de6459f4324ec539711bc03680dc6ed6fe182b75074ecba5f507","observation_id":"011e530b-c965-467d-9884-bc61fcad0a26","resolution":{"observed_at":"2026-08-05T22:07:42.016361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.021157Z","title":"Maxwell Harper and Joseph A","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.021157Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:500291d234a19cd66053131f286dee3dfe3bd20912d136337ec4663d2b08bd74","observation_id":"5b78afde-0831-412c-a2ab-cbadc49d27ab","resolution":{"observed_at":"2026-08-05T22:07:42.021157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23885","last_updated":"2025-06-11T01:42:53Z","snapshot_observed_at":"2026-07-06T21:33:12.217704Z","submitted_at":"2025-05-29T17:51:58Z","title":"OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23885","snapshot_observed_at":"2026-08-05T22:07:42.028159Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.028159Z"},"links":{"cited_paper":"/paper/2505.23885","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:70aac954b509d0dadc0dad65a921fed9b73e9372c17c51d34b73494e003b2a65","observation_id":"e52e806d-7d05-446c-92ef-eab78f4db8fe","resolution":{"observed_at":"2026-08-05T22:07:42.028159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.033071Z","title":"Rossi, Branislav Kveton, Dongruo Zhou, Julian McAuley, and Lina Yao","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.033071Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:c83e556c3f64ae97c2e486e537d78084aa85f8b69d8e7e6c05664f92b2599806","observation_id":"9a683da6-de20-4caf-9efe-b95b73f4341f","resolution":{"observed_at":"2026-08-05T22:07:42.033071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.044022Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.044022Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:52e248062e0d03e0af594105757018b49e9b663d09a30056c60331c3d3cf47f3","observation_id":"6e38ba06-2fd4-4b99-b0eb-83b24089da4f","resolution":{"observed_at":"2026-08-05T22:07:42.044022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.16505","last_updated":"2024-01-30T03:17:26Z","snapshot_observed_at":"2026-07-06T16:12:38.269310Z","submitted_at":"2023-08-31T07:36:44Z","title":"Recommender AI Agent: Integrating Large Language Models for Interactive Recommendations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.16505","snapshot_observed_at":"2026-08-05T22:07:42.048873Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.048873Z"},"links":{"cited_paper":"/paper/2308.16505","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e499b4685f27e3bec26a5f4e2b92acf8f00cbaa19b9c4e5673354a125be164e2","observation_id":"f71597fe-86ea-46d8-b771-034a7436c20d","resolution":{"observed_at":"2026-08-05T22:07:42.048873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.27771","last_updated":"2026-04-04T07:45:49Z","snapshot_observed_at":"2026-07-06T22:51:00.579062Z","submitted_at":"2026-03-29T17:10:28Z","title":"Emergent Social Intelligence Risks in Generative Multi-Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.27771","snapshot_observed_at":"2026-08-05T22:07:42.054451Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.054451Z"},"links":{"cited_paper":"/paper/2603.27771","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:50111a113971a8598820e0437c91058b3e9227cee84d7e4a7c545164f3b7ea32","observation_id":"59eaeefa-68d5-4318-a7a8-091bc77fa2dd","resolution":{"observed_at":"2026-08-05T22:07:42.054451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.061081Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.061081Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3b1090aad223877b89067256ca7e39308d6237d4b23471404803c717b82aa1be","observation_id":"bdc92014-0cdf-46ef-9494-910d615f5609","resolution":{"observed_at":"2026-08-05T22:07:42.061081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.066394Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.066394Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:9581893c469ab80c821e3117e70cbd6d59fa1ce85dacf4cb0fcc4a471b6e9d24","observation_id":"610b611c-038a-4192-8c3e-f0280ef12163","resolution":{"observed_at":"2026-08-05T22:07:42.066394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00331","last_updated":"2024-11-01T03:09:28Z","snapshot_observed_at":"2026-07-06T19:43:23.653382Z","submitted_at":"2024-11-01T03:09:28Z","title":"Beyond Utility: Evaluating LLM as Recommender","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00331","snapshot_observed_at":"2026-08-05T22:07:42.071203Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.071203Z"},"links":{"cited_paper":"/paper/2411.00331","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:7e0b00138a8b4d09edca3a8de92814692aa059ce34b45316e2cc348c2044bdc3","observation_id":"1977d10e-edd1-4207-9423-e3364a2934eb","resolution":{"observed_at":"2026-08-05T22:07:42.071203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.076356Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.076356Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:f5f7c37245d457e90afc2d5eb10d74115941219e7e86116f3039f38d56310770","observation_id":"53a017fd-4867-467b-b449-4fc85e553e8c","resolution":{"observed_at":"2026-08-05T22:07:42.076356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.080583Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.080583Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:45b92b511118a7f1abe7792f859ab937f412780a52e543425d709f4a8fe7950b","observation_id":"e27e2c99-a118-401f-936c-a594e0e53cf2","resolution":{"observed_at":"2026-08-05T22:07:42.080583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.084607Z","title":"2025.LangManus: A Community-Driven AI Automation Framework","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.084607Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:11a7bb857255cc38465f04a881dadd6d4ab3c786385d27996af247255766c59a","observation_id":"0886bdba-5516-4cc2-b8d0-77c7f16ca71c","resolution":{"observed_at":"2026-08-05T22:07:42.084607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-05T22:07:42.088799Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.088799Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:bf0819ed2a617ae6febf4a4e1df8bac79bd9cdace87e7d98a9895ffb8aebf014","observation_id":"89d322d8-b654-44c1-a876-e688e4963e1c","resolution":{"observed_at":"2026-08-05T22:07:42.088799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.093397Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.093397Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:212e28d768c6492c5ee077c1c061a55974311bd3b6a38435aa393d834656ea55","observation_id":"a918ab4c-7cf2-45fc-a412-cbac8ba08dbe","resolution":{"observed_at":"2026-08-05T22:07:42.093397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.24961","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:45.740624Z","title":null,"venue":null,"work_id":"9e1e120a-c49d-47d6-9ba2-2943e45921f2","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.098094Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:819998fda1aedd130d0859febe2f3e0c3ac27988c67e2828f10eb929f389ce1a","observation_id":"0d9f6804-9d18-4497-878e-83ac7e15789e","resolution":{"observed_at":"2026-08-05T22:07:45.749588Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.102489Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.102489Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3d4571eea61866d30e8c342859bfa665c9b6a8a6000fe828cc5e127476186a33","observation_id":"73f620cc-c66d-4b0a-a0fb-f8955ab519ba","resolution":{"observed_at":"2026-08-05T22:07:42.102489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.04129","last_updated":"2026-05-04T17:10:23Z","snapshot_observed_at":"2026-07-06T22:37:41.555068Z","submitted_at":"2025-12-03T05:10:39Z","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.04129","snapshot_observed_at":"2026-08-05T22:07:42.107249Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.107249Z"},"links":{"cited_paper":"/paper/2512.04129","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:8e06642b0d898d7c14c63536a9ece3e3ebb5ff8916f5487ff68676f12de86eb5","observation_id":"1b6d963f-12aa-4677-b10f-4d9438f9dfe5","resolution":{"observed_at":"2026-08-05T22:07:42.107249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2022.31832","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:45.498542Z","title":null,"venue":null,"work_id":"1eca62a1-f304-4886-a0c6-ebbca2085709","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.112964Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:a629e88d0a2a5b8bfec472c11ebc4b5689f933e5350a4adf4e4d4d3d22a9c428","observation_id":"9f445b20-d7c0-49ab-9aa2-a4fa03148c4e","resolution":{"observed_at":"2026-08-05T22:07:45.511587Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.04668","last_updated":"2026-06-03T14:38:00Z","snapshot_observed_at":"2026-08-03T18:37:09.476346Z","submitted_at":"2025-12-04T11:00:49Z","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.04668","snapshot_observed_at":"2026-08-05T22:07:42.117389Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.117389Z"},"links":{"cited_paper":"/paper/2512.04668","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:b60354015a4d4ebee64ec169861bf04faf893819179e3c9db7d791ed98b4c6d8","observation_id":"0e0a5a4f-9b15-43e1-b166-c441d4449e93","resolution":{"observed_at":"2026-08-05T22:07:42.117389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13843","last_updated":"2025-04-18T07:48:48Z","snapshot_observed_at":"2026-07-06T20:39:15.111209Z","submitted_at":"2025-02-19T16:02:59Z","title":"AgentCF++: Memory-enhanced LLM-based Agents for Popularity-aware Cross-domain Recommendations","version":2},"cited_work":{"arxiv_id":"2502.13843","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.13843","snapshot_observed_at":"2026-08-05T22:07:45.371013Z","title":"AgentCF++: Memory-enhanced LLM-based Agents for Popularity-aware Cross-domain Recommendations","venue":"cs.IR","work_id":"8c5efffe-de14-4a51-a02f-2bec1d5693b4","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.122371Z"},"links":{"cited_paper":"/paper/2502.13843","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:85fd22b226aca051575841bdf9264024f8cca153cd4936311914e1fb8c44205d","observation_id":"a9cd9016-96ca-42ac-8d73-99bd968b4fde","resolution":{"observed_at":"2026-08-05T22:07:45.379875Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.02097","last_updated":"2026-06-28T08:31:01Z","snapshot_observed_at":"2026-08-06T20:35:32.980157Z","submitted_at":"2025-07-02T19:25:44Z","title":"The Future is Agentic: Definitions, Perspectives, and Open Challenges of Multi-Agent Recommender Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.02097","snapshot_observed_at":"2026-08-05T22:07:42.127358Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.127358Z"},"links":{"cited_paper":"/paper/2507.02097","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:693c03e881372f124ba00c06fb3125385b5a7a3ce82abdf4baf034c80933eefc","observation_id":"3de6567c-2c76-4499-bf52-ae0d5c9868da","resolution":{"observed_at":"2026-08-05T22:07:42.127358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.08127","last_updated":"2026-04-25T05:20:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-11T16:04:47Z","title":"BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.08127","snapshot_observed_at":"2026-08-05T22:07:42.132270Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.132270Z"},"links":{"cited_paper":"/paper/2508.08127","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4189766ea41e6ca135572c77a68b98677052ccd125386b0755a2fe25ad899de8","observation_id":"fe5d1225-a62d-4596-9f50-3176b9b495cb","resolution":{"observed_at":"2026-08-05T22:07:42.132270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14942","last_updated":"2024-04-23T11:36:36Z","snapshot_observed_at":"2026-07-06T18:04:17.561892Z","submitted_at":"2024-04-23T11:36:36Z","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":"2404.14942","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.14942","snapshot_observed_at":"2026-08-05T22:07:45.291131Z","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","venue":"cs.CR","work_id":"c98260f2-db13-42ff-a6b2-2627e7705450","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.138946Z"},"links":{"cited_paper":"/paper/2404.14942","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:070ab79edd1cc0272393a587c2007a29ab9569affa5181dd5531c14066f65434","observation_id":"7e78c1c1-df0a-4678-8c2e-f279353e119c","resolution":{"observed_at":"2026-08-05T22:07:45.298537Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11182","last_updated":"2025-04-15T13:37:38Z","snapshot_observed_at":"2026-08-07T08:55:50.628897Z","submitted_at":"2025-04-15T13:37:38Z","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11182","snapshot_observed_at":"2026-08-05T22:07:42.144046Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.144046Z"},"links":{"cited_paper":"/paper/2504.11182","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:d16f850b14fbc88009ebe32f2f0afdb61e52e81cdc3a075ccc798e7fd5d12e5c","observation_id":"5ea070ab-7bea-4702-a35a-58b1a9b66b95","resolution":{"observed_at":"2026-08-05T22:07:42.144046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.149514Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.149514Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:d760de0b1a73691931695a34dd1f781da63b57e6baec8b0b2686badb6642b23f","observation_id":"fb5a4b14-d9af-4337-9b80-4e52d5019a00","resolution":{"observed_at":"2026-08-05T22:07:42.149514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.154470Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.154470Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:549ed0491a32ae859dc97c4a79b1b5de314ee3b2fcc2963510d6ea0b3da2612a","observation_id":"72079a6f-7b88-4d58-808f-5982a4121a03","resolution":{"observed_at":"2026-08-05T22:07:42.154470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.07442","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:45.120223Z","title":null,"venue":null,"work_id":"b54c2adf-35e0-4a9e-84f2-0c69460f79c0","year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.158797Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3aae67e07e28905ebdd8d724122e60670e6869e2a6ae98694ce50e16830a3702","observation_id":"fd741f99-4a97-45dc-9aa4-26a0e031417a","resolution":{"observed_at":"2026-08-05T22:07:45.129151Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.163183Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.163183Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:b7c5df830f5d75864fb0bd1e81443643835fe87e224c9d61c1acf37cc1efc45c","observation_id":"905baf38-cfda-4a31-b900-6cfdd6a618f9","resolution":{"observed_at":"2026-08-05T22:07:42.163183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.168040Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.168040Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:0b8d132f40693ade92075564881c5ac707bad5785f4c64e8ec6ab127fc707236","observation_id":"cff18793-a605-4e69-bb3a-82927e1b4708","resolution":{"observed_at":"2026-08-05T22:07:42.168040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10050","last_updated":"2025-02-14T09:57:07Z","snapshot_observed_at":"2026-07-06T20:36:31.219087Z","submitted_at":"2025-02-14T09:57:07Z","title":"A Survey on LLM-powered Agents for Recommender Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.10050","snapshot_observed_at":"2026-08-05T22:07:42.172329Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.172329Z"},"links":{"cited_paper":"/paper/2502.10050","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:db1c81b509730866e63c27b593915206525aa6d985f84e4e355883a6935c29d3","observation_id":"81b4864b-5769-4208-a616-bba3c794af9c","resolution":{"observed_at":"2026-08-05T22:07:42.172329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4915.36094","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.899915Z","title":null,"venue":null,"work_id":"aac980fe-b59a-4017-837a-6e7aeee83568","year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.177444Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:f3b93c831e88f8b7cebc041fd2476d5781bb0f4c77ff926eff353becbfc9794d","observation_id":"b885f98b-df86-4fc3-929a-e72b4c7fd97f","resolution":{"observed_at":"2026-08-05T22:07:44.916018Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19623","last_updated":"2025-05-28T14:32:56Z","snapshot_observed_at":"2026-07-06T21:30:23.899598Z","submitted_at":"2025-05-26T07:45:11Z","title":"AgentRecBench: Benchmarking LLM Agent-based Personalized Recommender Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19623","snapshot_observed_at":"2026-08-05T22:07:42.181996Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.181996Z"},"links":{"cited_paper":"/paper/2505.19623","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:675dedaedeb2b83cb3b7fb5d7104f8b3a67567b1d140d4e58da378fab47f6a0d","observation_id":"2eaa5503-accf-40d0-baa6-04bfe0564fff","resolution":{"observed_at":"2026-08-05T22:07:42.181996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23352","last_updated":"2025-05-29T11:21:48Z","snapshot_observed_at":"2026-07-06T21:32:52.588223Z","submitted_at":"2025-05-29T11:21:48Z","title":"Understanding the Information Propagation Effects of Communication Topologies in LLM-based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23352","snapshot_observed_at":"2026-08-05T22:07:42.187727Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.187727Z"},"links":{"cited_paper":"/paper/2505.23352","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3409c544d0d7a6a5722f61fe22a26dc607b6860ba78afbbecf3f0ce928ffbb5d","observation_id":"4ca546f7-74d5-4c37-a494-20a62dcb1c0f","resolution":{"observed_at":"2026-08-05T22:07:42.187727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.192963Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.192963Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:dbf72d61a9ae2c96d7c0d765099996fca3b4b99e527f7460595e8b041e90676d","observation_id":"9ce8dabc-9440-44ad-93a3-d07b341271b6","resolution":{"observed_at":"2026-08-05T22:07:42.192963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.21447","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.661193Z","title":null,"venue":null,"work_id":"fa6d9ec9-cdb4-45c6-b7e1-48e2f1441e1e","year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.197595Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:5e90a2c70165709b3306e4662c00c4eacfd6510b0aaa2eaba181c3521bd08068","observation_id":"caebc462-542d-40c8-be2a-87a93b416e60","resolution":{"observed_at":"2026-08-05T22:07:44.670536Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19855","last_updated":"2024-10-22T14:11:26Z","snapshot_observed_at":"2026-07-06T19:39:55.766423Z","submitted_at":"2024-10-22T14:11:26Z","title":"Personalized Recommendation Systems using Multimodal, Autonomous, Multi Agent Systems","version":1},"cited_work":{"arxiv_id":"2410.19855","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.19855","snapshot_observed_at":"2026-08-05T22:07:44.564977Z","title":"Personalized Recommendation Systems using Multimodal, Autonomous, Multi Agent Systems","venue":"cs.IR","work_id":"1d31ce7a-b649-47b5-b2c3-9d00361351a4","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.202065Z"},"links":{"cited_paper":"/paper/2410.19855","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4d07e02c0a54723c6c6a1c2078377c97e18474c79f7bc16bd5d6d053cea21730","observation_id":"935e4329-0012-44a4-8c48-e8fc5a505df9","resolution":{"observed_at":"2026-08-05T22:07:44.573492Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.28476","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.526140Z","title":null,"venue":null,"work_id":"3f239869-4b44-4a49-a7ad-4d97efee1746","year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.207877Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:be466a0c74cf71627aefa3c59d2378a2099eb96f51eeca9009f3287aabdcefc2","observation_id":"b83d3335-8d72-485d-bce1-9de5713c2109","resolution":{"observed_at":"2026-08-05T22:07:44.540455Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.12188","last_updated":"2025-09-12T19:53:17Z","snapshot_observed_at":"2026-08-05T04:45:00.829958Z","submitted_at":"2025-03-15T16:16:08Z","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.12188","snapshot_observed_at":"2026-08-05T22:07:42.214656Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.214656Z"},"links":{"cited_paper":"/paper/2503.12188","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ccb83983a7f839900cca84bfa3da96e5d7a64d08a93e5271d75accee3eaae5de","observation_id":"e69bc127-7d6e-4261-86b0-333670b84d27","resolution":{"observed_at":"2026-08-05T22:07:42.214656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12442","last_updated":"2025-06-17T15:37:58Z","snapshot_observed_at":"2026-07-06T21:25:52.131700Z","submitted_at":"2025-05-18T14:31:45Z","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12442","snapshot_observed_at":"2026-08-05T22:07:42.219855Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.219855Z"},"links":{"cited_paper":"/paper/2505.12442","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:aa22f50bdac62fcd29d8cfb27f1c39b95cb63175aaa316c08ffa6567e946fe99","observation_id":"03059b16-f2ae-48d1-bbd0-fcca57eaf516","resolution":{"observed_at":"2026-08-05T22:07:42.219855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.02552","last_updated":"2024-02-15T11:34:29Z","snapshot_observed_at":"2026-07-06T15:37:51.083798Z","submitted_at":"2023-06-05T02:58:35Z","title":"User Behavior Simulation with Large Language Model based Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.02552","snapshot_observed_at":"2026-08-05T22:07:42.224736Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.224736Z"},"links":{"cited_paper":"/paper/2306.02552","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3154fc1cb2bdaade7233ca223f561ea2304632d08f546dd2058a92572d31949a","observation_id":"abbfc0f4-2503-41e8-92e0-3e2dac3c51ba","resolution":{"observed_at":"2026-08-05T22:07:42.224736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11127","last_updated":"2025-02-16T13:48:41Z","snapshot_observed_at":"2026-08-01T18:39:47.677655Z","submitted_at":"2025-02-16T13:48:41Z","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11127","snapshot_observed_at":"2026-08-05T22:07:42.230156Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.230156Z"},"links":{"cited_paper":"/paper/2502.11127","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:554d114b062464d014bf0bbc8fe894211fdb7fb6cc0a0e4a1c8b34f5ddaa45b1","observation_id":"87fdf0a1-cd1a-4a82-9ec5-fd17ce869322","resolution":{"observed_at":"2026-08-05T22:07:42.230156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.17918","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.321182Z","title":null,"venue":null,"work_id":"4ae61804-ef48-4dd5-ab5c-0016b377aaf4","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.235270Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:db34a7e6aea212c11ef8a53bc4c2efc22dfba8e2f370908159378cac9e4272fa","observation_id":"575bb3fb-28d5-417c-8aa9-305e000ffdcb","resolution":{"observed_at":"2026-08-05T22:07:44.334270Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14296","last_updated":"2024-03-20T18:13:10Z","snapshot_observed_at":"2026-07-06T16:11:02.763364Z","submitted_at":"2023-08-28T04:31:04Z","title":"RecMind: Large Language Model Powered Agent For Recommendation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14296","snapshot_observed_at":"2026-08-05T22:07:42.239519Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.239519Z"},"links":{"cited_paper":"/paper/2308.14296","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:bb1d51ab0bf96e032aa59be2151b18c427bc1d4811c5f4449b71c2b434948462","observation_id":"fea13fb5-8067-439e-9d30-f02ebbfa8b5a","resolution":{"observed_at":"2026-08-05T22:07:42.239519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03703","last_updated":"2025-09-12T02:59:56Z","snapshot_observed_at":"2026-08-06T15:48:07.392556Z","submitted_at":"2025-07-20T05:03:02Z","title":"Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective","version":2},"cited_work":{"arxiv_id":"2508.03703","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.03703","snapshot_observed_at":"2026-08-05T22:07:44.207441Z","title":"Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective","venue":"cs.IR","work_id":"afca5aa7-e7cd-488a-96c5-48c455cbb9cc","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.244283Z"},"links":{"cited_paper":"/paper/2508.03703","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:138435360d3d1ba00fbd87c7c492066d0a0abf906a9284391b163fbf730e1ccc","observation_id":"101bfe2f-0936-4977-b21d-c8267b30d5b1","resolution":{"observed_at":"2026-08-05T22:07:44.212959Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11690","last_updated":"2025-04-28T15:39:28Z","snapshot_observed_at":"2026-08-06T19:08:45.069639Z","submitted_at":"2024-09-18T04:10:44Z","title":"ID-Free Not Risk-Free: LLM-Powered Agents Unveil Risks in ID-Free Recommender Systems","version":3},"cited_work":{"arxiv_id":"2409.11690","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.11690","snapshot_observed_at":"2026-08-05T22:07:44.181470Z","title":"ID-Free Not Risk-Free: LLM-Powered Agents Unveil Risks in ID-Free Recommender Systems","venue":"cs.IR","work_id":"5b391ce5-b6d6-4f94-964b-7fe60255adff","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.250218Z"},"links":{"cited_paper":"/paper/2409.11690","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:7101c7ef8d1a9d845ef2d9ae7fd5e4c60e04b46cd1739d7ab205178b756f7ccb","observation_id":"80287501-b091-4c44-af1f-525cfe56d01d","resolution":{"observed_at":"2026-08-05T22:07:44.187600Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.05845","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.139912Z","title":null,"venue":null,"work_id":"5a544851-0731-43ba-a38c-cbd94f8c069a","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.254944Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:d01c5716d865c86efca25d153451f621913ef1a0a68112cc47d821f403ea7ae0","observation_id":"0558f9d5-8443-4cbe-93bc-4872041deee9","resolution":{"observed_at":"2026-08-05T22:07:44.152402Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.259956Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.259956Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4b0aeb2518e68d0b7d52b9232928bfa751ce94426d3fc8474db46727caf8c59b","observation_id":"0bfc9218-d90d-4b9a-982f-4d13381a40e2","resolution":{"observed_at":"2026-08-05T22:07:42.259956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.01022","last_updated":"2024-06-05T07:30:59Z","snapshot_observed_at":"2026-07-06T18:24:13.721696Z","submitted_at":"2024-06-03T06:08:02Z","title":"Poisoning Attacks and Defenses in Recommender Systems: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.01022","snapshot_observed_at":"2026-08-05T22:07:42.264460Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.264460Z"},"links":{"cited_paper":"/paper/2406.01022","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:5f2b15907fc1263f8f308d4b9e817f24caea9920642cefb5fc9c0a478917384a","observation_id":"a50f4c4a-7e93-493f-b71f-638d53503a0f","resolution":{"observed_at":"2026-08-05T22:07:42.264460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.269373Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.269373Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:55c40600f130086c77b14a3b1d6f31be97bdf315bb4e2fb43c3b5ab1698f4028","observation_id":"11eecb77-fd99-4ee8-9ae3-2d1667d75f84","resolution":{"observed_at":"2026-08-05T22:07:42.269373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.274137Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.274137Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:67a60bae7cf77dc3687e7871ecda4b998bed906b19a0c3b3702592b868ed677f","observation_id":"b7bda5d9-e9f5-4733-8a73-76d581ad0f2a","resolution":{"observed_at":"2026-08-05T22:07:42.274137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.13700","last_updated":"2024-09-05T02:47:49Z","snapshot_observed_at":"2026-07-06T19:18:53.582890Z","submitted_at":"2024-09-05T02:47:49Z","title":"MAS4POI: a Multi-Agents Collaboration System for Next POI Recommendation","version":1},"cited_work":{"arxiv_id":"2409.13700","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.13700","snapshot_observed_at":"2026-08-05T22:07:43.898233Z","title":"MAS4POI: a Multi-Agents Collaboration System for Next POI Recommendation","venue":"cs.IR","work_id":"ea2407e5-93c8-41e4-a7e2-484d1f22ca82","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.279120Z"},"links":{"cited_paper":"/paper/2409.13700","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:63642117fc88cb00bfbf3f62c951dcbff54db46898085c0d88e5bf2cdade39da","observation_id":"7b37eb5e-ae22-48e6-ad75-92e9b722cb74","resolution":{"observed_at":"2026-08-05T22:07:43.904102Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03995","last_updated":"2023-05-06T10:04:43Z","snapshot_observed_at":"2026-07-06T15:24:04.050068Z","submitted_at":"2023-05-06T10:04:43Z","title":"Attacking Pre-trained Recommendation","version":1},"cited_work":{"arxiv_id":"2305.03995","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.03995","snapshot_observed_at":"2026-08-05T22:07:43.867167Z","title":"Attacking Pre-trained Recommendation","venue":"cs.IR","work_id":"6465811e-22f6-4d62-9e58-a1675cfb853b","year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.283770Z"},"links":{"cited_paper":"/paper/2305.03995","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e45b9e8d7ab3d0836ee227b49b1e9bdcd02cd57aed84abd4143940a673b1cc09","observation_id":"6c0e19f1-5b3f-401e-8cdc-3a9ab683d2bc","resolution":{"observed_at":"2026-08-05T22:07:43.874690Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.09230","last_updated":"2025-08-12T07:48:51Z","snapshot_observed_at":"2026-08-05T21:24:36.962448Z","submitted_at":"2025-08-12T07:48:51Z","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":"2508.09230","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.09230","snapshot_observed_at":"2026-08-05T22:07:43.829210Z","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","venue":"cs.MA","work_id":"3e01d77e-8d08-4e72-8372-ccd1e58f8a31","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.288855Z"},"links":{"cited_paper":"/paper/2508.09230","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:0485622bb81a5eafaeedcaa3109d8cc63174e5bf5b8548602fab8ad34381dff1","observation_id":"9414fe2a-8a4e-4c44-a17e-1af7a376308f","resolution":{"observed_at":"2026-08-05T22:07:43.837793Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.294040Z","title":"Rossi, and Julian McAuley","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.294040Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:fbea2422f13e8e0213441b1c5f376bcde07966e24f3b1baae03955f604a9af4a","observation_id":"58d5e141-48ac-4238-8b76-148787a807e8","resolution":{"observed_at":"2026-08-05T22:07:42.294040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.299672Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.299672Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:55bcd2c9191698304e3df5d6255a51f6d85a37503327b90df004d4f312fa4b1c","observation_id":"cc04cd91-635e-4690-9947-c414885eb1b6","resolution":{"observed_at":"2026-08-05T22:07:42.299672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-06T08:33:34.142274Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-08-05T22:07:42.304265Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.304265Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e3568d36a825d3cd4dc3d838018cfaffa156340c815e50f9ea28f2a19b6e9083","observation_id":"8909be5d-67d9-4685-99c1-96fccbf5d288","resolution":{"observed_at":"2026-08-05T22:07:42.304265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.310859Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.310859Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:eba28b5ce1f9189dcc9eb1a111e5a15acb1055f6b4950533801c791a39b80841","observation_id":"6c5e539a-e447-4add-a245-abc85d3f13a6","resolution":{"observed_at":"2026-08-05T22:07:42.310859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.15252","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:43.474536Z","title":null,"venue":null,"work_id":"1c4325ce-f8a8-4735-b6ba-7ba63909c779","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.316247Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:52ebdbb8eea065ea2730936e4766c8b37d36df587595c13be818fcd2c1abe8b6","observation_id":"8742030f-c040-4eff-a28d-2b1c2e3576d6","resolution":{"observed_at":"2026-08-05T22:07:43.482234Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23485","last_updated":"2025-06-30T03:15:50Z","snapshot_observed_at":"2026-08-07T07:21:39.542153Z","submitted_at":"2025-06-30T03:15:50Z","title":"Thought-Augmented Planning for LLM-Powered Interactive Recommender Agent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23485","snapshot_observed_at":"2026-08-05T22:07:42.320972Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.320972Z"},"links":{"cited_paper":"/paper/2506.23485","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:d5b5fccfee3c62799e9f71b9a2112f32ad9e539d55f7ecb42d88ba938ea4a306","observation_id":"8a5b0b76-5044-4549-8ce0-7f7fa514c103","resolution":{"observed_at":"2026-08-05T22:07:42.320972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15686","last_updated":"2024-10-21T06:54:27Z","snapshot_observed_at":"2026-08-04T07:28:02.629995Z","submitted_at":"2024-10-21T06:54:27Z","title":"NetSafe: Exploring the Topological Safety of Multi-agent Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15686","snapshot_observed_at":"2026-08-05T22:07:42.326351Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.326351Z"},"links":{"cited_paper":"/paper/2410.15686","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ac73d21e59258c0344621a04e1c5c417c804580ea6fd275d0d8f4fe5a59aaa5c","observation_id":"439bf9dd-7411-49ef-9973-ca45d445ff62","resolution":{"observed_at":"2026-08-05T22:07:42.326351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-05T22:07:42.331664Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.331664Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ce323c2b4c892905ba646b68183bcc4a017cc794dc11fb9cf9fe773dbbf8ff2c","observation_id":"78a43e56-50fe-41fd-81b0-f5bcdc1ea509","resolution":{"observed_at":"2026-08-05T22:07:42.331664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-05T22:07:42.341577Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.341577Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4cd189bd143ce45eb03bcab17dd4613038134742afff3a3fcb190a0f17b62c8f","observation_id":"346400ab-e9b8-4080-a79c-4f1a54e50461","resolution":{"observed_at":"2026-08-05T22:07:42.341577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18240","last_updated":"2024-03-05T12:14:52Z","snapshot_observed_at":"2026-08-06T16:33:18.928500Z","submitted_at":"2024-02-28T11:12:17Z","title":"Prospect Personalized Recommendation on Large Language Model-based Agent Platform","version":2},"cited_work":{"arxiv_id":"2402.18240","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.18240","snapshot_observed_at":"2026-08-05T22:07:43.211618Z","title":"Prospect Personalized Recommendation on Large Language Model-based Agent Platform","venue":"cs.IR","work_id":"b87f50ac-f751-437e-b343-222b623fd95d","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.346584Z"},"links":{"cited_paper":"/paper/2402.18240","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:7e54d3d1a0fa97eddb2133d13b1cf24820b9ed1ec90ac685877a072f65a8c6d6","observation_id":"85b5c48f-bdc5-48ce-85aa-e2c0d52a8c54","resolution":{"observed_at":"2026-08-05T22:07:43.217930Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.351654Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.351654Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:74ede833b4ec69ab8f19d36794da9bb8ea4b9637fa70cdb413314a8fb265863d","observation_id":"60c99874-77ac-444c-adbd-9f4b9a04b346","resolution":{"observed_at":"2026-08-05T22:07:42.351654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.357017Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.357017Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3264c40b4996db02a36c0daf124356c89d6cd563f53989c88d1725cf2bfc4458","observation_id":"ef1fb838-c6ac-4688-84e6-a5fb717c1e27","resolution":{"observed_at":"2026-08-05T22:07:42.357017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0120.34847","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:43.052116Z","title":null,"venue":null,"work_id":"beaadf90-1c28-486a-bf70-24190a21906a","year":2021},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.370072Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:f7598f456f9a004470152124e374df311674ca2f214e3e28668e1867766d1426","observation_id":"91de21b6-0ff6-4a3f-b710-1659bc4be95c","resolution":{"observed_at":"2026-08-05T22:07:43.061541Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.374894Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.374894Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ea27facfbf088de77b96110254f17c32814bf1bc03fdf4809bd5deb4605a6cd7","observation_id":"d9d901a0-45a7-4f58-a56a-2de0a9ba6160","resolution":{"observed_at":"2026-08-05T22:07:42.374894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.03051","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.927834Z","title":null,"venue":null,"work_id":"39fb866f-2a7c-4ef0-9ae1-e589b2f186a8","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.386272Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:5c9ad4a6595d69a183f9f722f45ed8d133eb73cf7f2aa74c1751dea9da035ebd","observation_id":"f4f9c5fb-db37-4daf-b69b-1012ded06d31","resolution":{"observed_at":"2026-08-05T22:07:42.936088Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.11880","last_updated":"2024-08-20T06:45:50Z","snapshot_observed_at":"2026-07-06T17:18:44.456380Z","submitted_at":"2024-01-22T12:11:55Z","title":"PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.11880","snapshot_observed_at":"2026-08-05T22:07:42.392385Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.392385Z"},"links":{"cited_paper":"/paper/2401.11880","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:a820e8620bc773e1b6a12fb1df0219953f5b7ecba25e699fe5c6a205526706e4","observation_id":"cf807d47-06b8-4406-aeb8-fcfa3025a60c","resolution":{"observed_at":"2026-08-05T22:07:42.392385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-05T22:07:42.380854Z","title":"arXiv:2404.17196 https://arxiv.org/abs/2404.17196","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.380854Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:97886f5b6ef6ef5bec8dd5e2096a5d4bbded28646a552dfcbc61eaa74ba9d5fa","observation_id":"85c35185-f384-4a9f-8229-133d41cc3ed6","resolution":{"observed_at":"2026-08-05T22:07:42.380854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.409952Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.409952Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:58b834c496c35b6d565192ec1b51aba434774552678171c62b0803de972224e9","observation_id":"ae47a06c-43cb-41c7-9970-607b6162e1d3","resolution":{"observed_at":"2026-08-05T22:07:42.409952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.415294Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.415294Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:70acbb199848ddf1e825e5f32276dd5bdfd7f380ae6a8e1bc381fa459cea3626","observation_id":"bb307ac2-f2a2-48ff-be59-3f140c3025a6","resolution":{"observed_at":"2026-08-05T22:07:42.415294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.402685Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.402685Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:53c76e392d748261493a331c1433f8339ed239fec8c723e15cedd14632191e15","observation_id":"609589b8-4287-4171-8440-3640387bbfbb","resolution":{"observed_at":"2026-08-05T22:07:42.402685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.08035","last_updated":"2024-05-13T03:02:56Z","snapshot_observed_at":"2026-07-06T18:13:46.440138Z","submitted_at":"2024-05-13T03:02:56Z","title":"A LLM-based Controllable, Scalable, Human-Involved User Simulator Framework for Conversational Recommender Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.08035","snapshot_observed_at":"2026-08-05T22:07:42.426490Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.426490Z"},"links":{"cited_paper":"/paper/2405.08035","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:97818f244b3be003d400fc28e9a9a9fe28977e74bbdaee0b6c0998f55641b0d8","observation_id":"f7a37788-e974-4ad6-bed9-2ff4a29118e2","resolution":{"observed_at":"2026-08-05T22:07:42.426490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.432678Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.432678Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:a40d5423401b44bc446e3128013310d6893876743800e571e34e89b88fdb3df4","observation_id":"f099c07c-9901-4f45-9426-f7c89ec84bd2","resolution":{"observed_at":"2026-08-05T22:07:42.432678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14529","last_updated":"2025-02-20T13:02:00Z","snapshot_observed_at":"2026-07-06T20:39:47.920307Z","submitted_at":"2025-02-20T13:02:00Z","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14529","snapshot_observed_at":"2026-08-05T22:07:42.420500Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.420500Z"},"links":{"cited_paper":"/paper/2502.14529","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:5b712eae0621b88217289775d0c6bd28290fcbea3f1ef36ae95b17ebc7e32e1f","observation_id":"41c32daa-f432-43b2-bd24-b500288f842e","resolution":{"observed_at":"2026-08-05T22:07:42.420500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14836","last_updated":"2024-06-05T17:02:47Z","snapshot_observed_at":"2026-07-06T17:34:11.950339Z","submitted_at":"2024-02-18T16:51:02Z","title":"Stealthy Attack on Large Language Model based Recommendation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14836","snapshot_observed_at":"2026-08-05T22:07:42.363853Z","title":"arXiv:2402.14836 https://arxiv.org/abs/2402.14836","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.363853Z"},"links":{"cited_paper":"/paper/2402.14836","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:831d80e1a0b91430d9f1ae5ed56864e54fdf1d3918eb5f3b595b5fa2965098b7","observation_id":"b44ce838-e91c-4b6c-86ab-2938bf4a8572","resolution":{"observed_at":"2026-08-05T22:07:42.363853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16734","last_updated":"2025-03-20T22:37:15Z","snapshot_observed_at":"2026-07-06T20:56:27.310542Z","submitted_at":"2025-03-20T22:37:15Z","title":"Towards Agentic Recommender Systems in the Era of Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16734","snapshot_observed_at":"2026-08-05T22:07:42.038221Z","title":"arXiv:2503.16734 [cs.AI] https://arxiv.org/abs/2503.16734","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.038221Z"},"links":{"cited_paper":"/paper/2503.16734","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:b4110022a121a0aa821c263253f6a8d2d8c3f577374e0e3e2e8114c7f0d2c77c","observation_id":"9e9a32d8-801a-4106-80f1-a2fcb03e24bd","resolution":{"observed_at":"2026-08-05T22:07:42.038221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","latest_version":1,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-07T10:15:56.181248Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity"},"reference_resolution":{"displayed":85,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":64,"verified_exact":18,"verified_fuzzy":0},"total_outbound_references":85},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 85 of 85 outbound references and 0 inbound Pith citation observations for arXiv:2608.03272."}