{"as_of":"2026-08-11T02:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a1b34f90771c4020019d22134c05e66873dd1c83b928b807e5400a97177faa69","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T04:30:17.488023Z","state":"measured"},{"denominator":22,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":22,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03509/citation-record","integrity":"/paper/2608.03509/integrity","json":"/paper/2608.03509/citation-record.json","paper":"/paper/2608.03509"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.413666Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.413666Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:aa0062ec7f6dbac3a99c4cd71d38bdd4825b24598e2a0db702196e6a9c074e4c","observation_id":"f3be7d9f-05b3-4729-8fab-047f5072bc1a","resolution":{"observed_at":"2026-08-10T04:30:17.413666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.04329","last_updated":"2026-06-18T22:06:23Z","snapshot_observed_at":"2026-08-04T07:47:41.111384Z","submitted_at":"2026-06-03T01:04:13Z","title":"From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.04329","snapshot_observed_at":"2026-08-10T04:30:17.417966Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.417966Z"},"links":{"cited_paper":"/paper/2606.04329","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:b4b77d7e52fd65e6517a069dd0a484ac134270d1540855f7eeb0cff3b0924d05","observation_id":"9b2dbcf1-2595-4b4a-8e01-903a497c055e","resolution":{"observed_at":"2026-08-10T04:30:17.417966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.422145Z","title":"Debenedetti, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.422145Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:3639026a8dc3712d7047f0425701c986ea508e76acf3d7f2f58ef9841a3adf48","observation_id":"7223c9f3-37ba-4deb-89c5-4b82ee80417e","resolution":{"observed_at":"2026-08-10T04:30:17.422145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.425647Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.425647Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:985cb54b7829422680c136a5eafebcc93abf9d1aa592b8f5a7b82aa29379d05a","observation_id":"3050acb2-17df-43f9-9d5e-daa1ada18d88","resolution":{"observed_at":"2026-08-10T04:30:17.425647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T04:30:17.429016Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.429016Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:4ea68f7e6258e8ffb78020f963fee99f7200647a782409b3c84789bbda9a7cfa","observation_id":"30aaf2ff-c22c-4ff7-9de7-26fa5b53f0cb","resolution":{"observed_at":"2026-08-10T04:30:17.429016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.24322","last_updated":"2026-06-23T08:57:50Z","snapshot_observed_at":"2026-08-09T03:50:08.272058Z","submitted_at":"2026-06-23T08:57:50Z","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.24322","snapshot_observed_at":"2026-08-10T04:30:17.432890Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.432890Z"},"links":{"cited_paper":"/paper/2606.24322","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:aca206b7a31ea533971566d23087339c884932f149983253c118b69c5dc2ec14","observation_id":"27c6fb14-cb48-40f6-8bb9-ef39f96651f3","resolution":{"observed_at":"2026-08-10T04:30:17.432890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.01869","last_updated":"2026-05-28T12:51:20Z","snapshot_observed_at":"2026-08-07T07:48:03.222597Z","submitted_at":"2026-02-02T09:43:12Z","title":"Skill-Pro: Learning Reusable Skills from Experience via Non-Parametric PPO for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.01869","snapshot_observed_at":"2026-08-10T04:30:17.436895Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.436895Z"},"links":{"cited_paper":"/paper/2602.01869","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:b2cc6e23a24546222a5d17e93ad15e76ab1ecaa119b45216c688e1daafdf44df","observation_id":"9992dace-f810-4ed5-a172-ed26d1d2ed23","resolution":{"observed_at":"2026-08-10T04:30:17.436895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.25158","last_updated":"2026-06-04T12:51:52Z","snapshot_observed_at":"2026-08-06T10:33:38.415457Z","submitted_at":"2026-03-26T08:26:38Z","title":"Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.25158","snapshot_observed_at":"2026-08-10T04:30:17.440509Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.440509Z"},"links":{"cited_paper":"/paper/2603.25158","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:edce43f1e4fab81fd31ea33c27fee6f2e1fc5e1a4bd0fe4fa1514c7e9fd37d74","observation_id":"e17c1100-fe14-4f39-9b88-8a9d04bd339a","resolution":{"observed_at":"2026-08-10T04:30:17.440509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.443983Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.443983Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:30b687674dfdb087cea9843f89e71fa07f64d3e58572fac209b196a8ff6c5217","observation_id":"8b80b906-2431-4c3c-bc15-01891995b6bb","resolution":{"observed_at":"2026-08-10T04:30:17.443983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.09316","last_updated":"2026-06-19T10:27:56Z","snapshot_observed_at":"2026-08-07T00:14:36.005862Z","submitted_at":"2026-06-08T10:24:32Z","title":"Anything2Skill: Compiling External Knowledge into Reusable Skills for Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.09316","snapshot_observed_at":"2026-08-10T04:30:17.447263Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.447263Z"},"links":{"cited_paper":"/paper/2606.09316","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:67d3d8baa3abe52cef83d37b921940287021453d173a5c0bb8ff76f52c4ccf7a","observation_id":"6c33900c-cd0c-4a20-9d71-0d2af8a86b2b","resolution":{"observed_at":"2026-08-10T04:30:17.447263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.450937Z","title":"Shafahi, W","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.450937Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:b4187871ba584eacbbe4e6a05de11587d6fab96e1ba72e527ec440fa792600d1","observation_id":"eaed5292-1a86-4ad9-a232-03aeef9cbe88","resolution":{"observed_at":"2026-08-10T04:30:17.450937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.454169Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.454169Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:98e7bbb1f651082d64379f280c36e28160c064e539778f7e168f141f3f73893a","observation_id":"783dad64-0433-4c34-8c4e-a4a6a3f4ecfe","resolution":{"observed_at":"2026-08-10T04:30:17.454169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.457514Z","title":"Trivedi, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.457514Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:5de4b9c3f30241b879be31bfdc1f821d30d044b208b33aeb45a9f978df08d51f","observation_id":"cd52dc41-14ee-4fa2-85b5-d18f53f121cd","resolution":{"observed_at":"2026-08-10T04:30:17.457514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.04804","last_updated":"2026-04-19T16:14:01Z","snapshot_observed_at":"2026-07-06T22:53:41.734429Z","submitted_at":"2026-04-06T16:09:33Z","title":"SkillX: Automatically Constructing Skill Knowledge Bases for Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.04804","snapshot_observed_at":"2026-08-10T04:30:17.460917Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.460917Z"},"links":{"cited_paper":"/paper/2604.04804","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:20123f9830c09be434569fc5f3253da1efe44ab6ca4e38527d1e50245895b3c5","observation_id":"e547a20f-2e8d-4384-a42c-cacc6e32b41c","resolution":{"observed_at":"2026-08-10T04:30:17.460917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.18930","last_updated":"2026-05-18T14:08:59Z","snapshot_observed_at":"2026-07-06T23:29:42.583875Z","submitted_at":"2026-05-18T14:08:59Z","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.18930","snapshot_observed_at":"2026-08-10T04:30:17.464357Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.464357Z"},"links":{"cited_paper":"/paper/2605.18930","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:02cd3282dca6c1845f9625bd65c74639520e8fff024014fe689fe9042348684b","observation_id":"af264448-677f-4f1a-9561-7e773cf2c7fe","resolution":{"observed_at":"2026-08-10T04:30:17.464357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07429","last_updated":"2024-09-11T17:21:00Z","snapshot_observed_at":"2026-08-11T02:44:48.157540Z","submitted_at":"2024-09-11T17:21:00Z","title":"Agent Workflow Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07429","snapshot_observed_at":"2026-08-10T04:30:17.467794Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.467794Z"},"links":{"cited_paper":"/paper/2409.07429","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:61d9cfc7f55503e07286093a3077f5219f0b9f1b55f62ecb3e5b9e5c94d7026a","observation_id":"a825894d-8253-471f-a885-b5c3b0d9d6e2","resolution":{"observed_at":"2026-08-10T04:30:17.467794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.471290Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.471290Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:4f70d92d4c30560348b8c2b9089eb17e6d0e93277b22a38efb68a62910af5a13","observation_id":"ee1b9701-30c2-4326-b889-a72be2d408d9","resolution":{"observed_at":"2026-08-10T04:30:17.471290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.474509Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.474509Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:8bb089adce6616fb06454cc6619d97cd4be14bf37e49b045b742b870ad302176","observation_id":"037bd6c7-f710-45d6-9057-77bc622d6e93","resolution":{"observed_at":"2026-08-10T04:30:17.474509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.24118","last_updated":"2026-04-27T07:12:52Z","snapshot_observed_at":"2026-07-30T05:21:40.679953Z","submitted_at":"2026-04-27T07:12:52Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.24118","snapshot_observed_at":"2026-08-10T04:30:17.477789Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.477789Z"},"links":{"cited_paper":"/paper/2604.24118","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:5d6f830809258bc60ccd9afcfb96e2336da772510c9fcfa7abe00db4b7bbaaf9","observation_id":"5f0beb60-b48e-4f15-8664-142f16e472f1","resolution":{"observed_at":"2026-08-10T04:30:17.477789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.481154Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.481154Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:e9fa9dd6821a9cbf182273e950437d327d9f530743590eba8cee3f1f39fde980","observation_id":"8c2bf115-90d5-4a0a-aeb8-3f58160a9e2f","resolution":{"observed_at":"2026-08-10T04:30:17.481154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.484592Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.484592Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:4e12a663b8856239e6a191df0553cadae1249c36470cbf350471726c97ed0507","observation_id":"7b399def-ec88-43dc-9e9b-7384eabb56b8","resolution":{"observed_at":"2026-08-10T04:30:17.484592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-05T14:57:29.112440Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-08-10T04:30:17.488023Z","title":"backup”, “archive","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.488023Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:c6fe78da0407ddf8efc8893edc582e4aaac13566cc74f74779bb2f521f6fdc09","observation_id":"b4028339-bd95-41bb-ac55-be2e635a72c1","resolution":{"observed_at":"2026-08-10T04:30:17.488023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T02:09:41.291399Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 0 inbound Pith citation observations for arXiv:2608.03509."}