{"as_of":"2026-08-09T11:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6603a2aca124d49fb29c264309e9add7e04b5c19251bedc88042bfc3be846de4","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T11:11:41.019247Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03844/citation-record","integrity":"/paper/2608.03844/integrity","json":"/paper/2608.03844/citation-record.json","paper":"/paper/2608.03844"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0994.1795","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.302516Z","title":"denotes mean cosine similarity to the nearest victim query","venue":null,"work_id":"982c0b1e-20ae-4cca-8ab1-1dfdb14551c9","year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.009782Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:ef2632058b177ac98bc103eccceae71887903d706fa0f41f558b7cdec14e1ffb","observation_id":"e768d6ae-457f-407f-b277-df9492b5335e","resolution":{"observed_at":"2026-08-05T11:11:41.310673Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-08-08T11:58:24.516369Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-05T11:11:40.899044Z","title":"arXiv preprint arXiv:2107.03374","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.899044Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:381a7cc5cb42235365869bce945145bbcf4a9d722b3bf3c5c60eb019505b998f","observation_id":"80340ae7-0d2e-4be6-ae31-a68efa44ba1c","resolution":{"observed_at":"2026-08-05T11:11:40.899044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2546.7120","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.393169Z","title":"Table 6: Retriever-paradigm generalization on MIMIC- III.(a)Macro RIR@ 4 across nine pairs.(b)ASR under the symmetricall-MiniLM-L6-v2retriever","venue":null,"work_id":"e4b1ef3a-2e49-498d-b49e-897dc2141889","year":2018},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.005081Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:6566d55afa46a81f646d5e6d16645665eeb2b884df39bb725b51ce39b7237f71","observation_id":"0eabf312-fd05-4a17-a66d-9f892ec2afd1","resolution":{"observed_at":"2026-08-05T11:11:41.404484Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.077625Z","title":"In Findings of the Association for Computational Linguistics: ACL 2025, pages 19796–19821","venue":null,"work_id":"1d60211e-fc05-4a3f-8d1d-f71bcbeea3ec","year":2025},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.914717Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:66cd633d75f3b4ebe864f1ac78b8258621262b4eede60a8b01704b4fe210c7e2","observation_id":"fb4edba5-868e-4dbf-9305-7af847e5ac97","resolution":{"observed_at":"2026-08-05T11:11:42.082800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.13564","last_updated":"2026-01-13T09:33:57Z","snapshot_observed_at":"2026-08-06T08:27:07.254588Z","submitted_at":"2025-12-15T17:22:34Z","title":"Memory in the Age of AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.13564","snapshot_observed_at":"2026-08-05T11:11:40.919347Z","title":"arXiv preprint arXiv:2512.13564","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.919347Z"},"links":{"cited_paper":"/paper/2512.13564","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:8c1d36e206326b5195922f208ea28955521bbe1971c9753d2c9e6c59f00af96f","observation_id":"5f271289-b3ae-430b-a993-cf1c58fb51b5","resolution":{"observed_at":"2026-08-05T11:11:40.919347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-05T11:11:40.924507Z","title":"arXiv preprint arXiv:2312.06674","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.924507Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:b3bbc25dfcd466be1ef8a6364e73adaa21a34ce36c42ea1135bd1febc024c666","observation_id":"9f0f457d-c628-4c28-8854-d9a825aa991c","resolution":{"observed_at":"2026-08-05T11:11:40.924507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.940444Z","title":"arXiv preprint arXiv:2501.18492","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.940444Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:f012b709302c526c6b0bc38384320c94a995a966c9b442492969a3396516cc71","observation_id":"33bf24a4-063d-4cf9-9c7f-6d62c2996eb2","resolution":{"observed_at":"2026-08-05T11:11:40.940444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.17318","last_updated":"2025-06-18T14:29:02Z","snapshot_observed_at":"2026-08-06T23:52:05.545407Z","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.17318","snapshot_observed_at":"2026-08-05T11:11:40.945299Z","title":"In Proceedings of the 36th annual acm symposium on user interface software and technology, pages 1–22","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.945299Z"},"links":{"cited_paper":"/paper/2506.17318","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:6f0be1a68b66f2ef738b2e2bf42c91a4a149d9a116574520642a052e48e60f03","observation_id":"88c2e2f8-c8e8-4f19-8a87-23e39c6d2a30","resolution":{"observed_at":"2026-08-05T11:11:40.945299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.954262Z","title":"arXiv preprint arXiv:2602.15344","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.954262Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:bdcb6097d016932372871eca73ff1b93be6841572c257fdf7ef8ca2086cc66f8","observation_id":"eb887256-0e1f-4e48-ae9a-be16a8fbd0db","resolution":{"observed_at":"2026-08-05T11:11:40.954262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.054688Z","title":"In Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing, pages 22315–22339","venue":null,"work_id":"679ec66a-4902-4d0a-a1c9-48b6c5a324ab","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.959610Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:e5d7677ba24015fbcddc5345d4b778e83debac34e3ee771009fbde5fa3896f64","observation_id":"7b575b6c-f55f-4b33-9f9e-431bff6775c5","resolution":{"observed_at":"2026-08-05T11:11:42.061190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.964776Z","title":"arXiv preprint arXiv:2512.16962","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.964776Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:1c6d88403c4a9db72abdefaef05ce5332322dea3d53a18f2f652af78b3a9efe5","observation_id":"578e49be-e9bd-4f82-b0f5-e7f06ca1deec","resolution":{"observed_at":"2026-08-05T11:11:40.964776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-07T08:29:46.650400Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-05T11:11:40.970057Z","title":"arXiv preprint arXiv:2305.16291","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.970057Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:268ad153f66d2f61a0bd57f290350b51a3429098072e487730bdfee23b3728c6","observation_id":"28778efe-44d3-4554-828f-6148c8da33b0","resolution":{"observed_at":"2026-08-05T11:11:40.970057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.035864Z","title":"In International Conference on Learning Representations, volume 2024, pages 32593–32627","venue":null,"work_id":"61a8b81e-7ed3-48e2-9aa6-67b49668c58e","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.974910Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:623cf65b2e4979db0d6ea54fde5cc49ea609a2c26c795e2185e4b8b99d694fc5","observation_id":"dc9973b4-a778-4544-b1ca-7774b7333816","resolution":{"observed_at":"2026-08-05T11:11:42.041112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.979534Z","title":"arXiv preprint arXiv:2510.02373","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.979534Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:287b425bfa8e93e3a62105a8a4ddc4115d5cbf3254096f283e4980f1b7dd8d25","observation_id":"97efe2d9-462b-49ee-b3f1-fe9b5b2aa18a","resolution":{"observed_at":"2026-08-05T11:11:40.979534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.018022Z","title":"In Findings of the Association for Computational Linguistics: ACL 2024, pages 3053–3077","venue":null,"work_id":"bf2e3c7c-b85a-41c9-919d-5f226f84c341","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.983698Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:14c6d8324d702ff7fb93e6cde103305e3da775de7b695cff178c937cfadb66d0","observation_id":"21592f37-54c4-4ade-9893-4fd76f3a8811","resolution":{"observed_at":"2026-08-05T11:11:42.022862Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.999980Z","title":"In International Conference on Learning Representations, volume 2024, pages 19036–19066","venue":null,"work_id":"8f2b680f-9182-468d-95fd-473f4f350c64","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.988621Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:aff293d874fcb247720f5d40be1fdbb734718337132c6268415b68e9a0851e41","observation_id":"d282220b-6a0b-425e-bd83-569623ba813f","resolution":{"observed_at":"2026-08-05T11:11:42.006483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.15841","last_updated":"2025-07-17T08:53:48Z","snapshot_observed_at":"2026-08-04T10:58:41.179508Z","submitted_at":"2025-06-18T19:44:46Z","title":"MEM1: Learning to Synergize Memory and Reasoning for Efficient Long-Horizon Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.15841","snapshot_observed_at":"2026-08-05T11:11:40.993520Z","title":"(→ Tin this DB)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.993520Z"},"links":{"cited_paper":"/paper/2506.15841","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:9d4f14ea7a1b6a11605b3404f0831ecfb82c6d7b6400e63c3f1c989aa32d0488","observation_id":"bc638171-856c-40cf-8aa5-ed5e8c3e7205","resolution":{"observed_at":"2026-08-05T11:11:40.993520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2291.1171","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.203282Z","title":"The HF Hub (DataInterpreter) row group targets HuggingFace model-identifier redirects in the agent’s from_pretrained call; individual pair definitions appear in Appendix F","venue":null,"work_id":"653c11ff-491d-4773-9323-527f4842cd09","year":1973},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.014368Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:7f07390b1e8bb8fe37b355d58fabc3b1b728f046692cd453ddd9f12be7d8efbe","observation_id":"0d9d5a20-c134-41c9-a58c-ceb931ac53ca","resolution":{"observed_at":"2026-08-05T11:11:41.216772Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.963572Z","title":null,"venue":null,"work_id":"ee55e9a2-0063-49c1-8541-511442a30298","year":2026},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.019247Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:c67446e966a5a1651b3d0d416ec46ff4b8b8fb5d228c4c539072955511fca597","observation_id":"3822f83c-b525-46db-ab69-4e7a15b9a97d","resolution":{"observed_at":"2026-08-05T11:11:41.969466Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07732","last_updated":"2021-08-16T03:57:30Z","snapshot_observed_at":"2026-08-02T19:23:53.535075Z","submitted_at":"2021-08-16T03:57:30Z","title":"Program Synthesis with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07732","snapshot_observed_at":"2026-08-05T11:11:40.893326Z","title":"arXiv preprint arXiv:2108.07732","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.893326Z"},"links":{"cited_paper":"/paper/2108.07732","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:2ff5ab47155aca55eb34db011ebbd53f7cadebb8992cbf56bafedd428595c01b","observation_id":"58b1adde-2b64-4a1b-82ca-451b6286fbc3","resolution":{"observed_at":"2026-08-05T11:11:40.893326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.983387Z","title":"out of stock","venue":null,"work_id":"3034df86-3abc-4351-ba86-2e63dd2c1c38","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.998938Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:f316c884a4f665298cec4f9efa75a47e47da50c31eaccea666f0c9de95023a00","observation_id":"a6aa3b3f-9640-4083-a2df-50b87aaba820","resolution":{"observed_at":"2026-08-05T11:11:41.988261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-05T11:11:40.909397Z","title":"arXiv preprint arXiv:2312.10997, 2(1):32","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.909397Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:93e86a3ad39bf282be5e417ab8110a385d1a7ab1612283e663237f16163386f4","observation_id":"38978088-8e05-4ea8-b505-c6a0df712d79","resolution":{"observed_at":"2026-08-05T11:11:40.909397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03610","last_updated":"2024-02-06T00:53:27Z","snapshot_observed_at":"2026-08-07T06:11:17.290504Z","submitted_at":"2024-02-06T00:53:27Z","title":"RAP: Retrieval-Augmented Planning with Contextual Memory for Multimodal LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03610","snapshot_observed_at":"2026-08-05T11:11:40.930421Z","title":"arXiv preprint arXiv:2402.03610","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.930421Z"},"links":{"cited_paper":"/paper/2402.03610","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:455f80fde13326d99731be51413b959bfbc5dae9922ec8514d5d63dfdedd461b","observation_id":"a8a49a66-ed81-4302-aab3-906d9caea3e7","resolution":{"observed_at":"2026-08-05T11:11:40.930421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-02T07:32:11.339534Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-08-05T11:11:40.904047Z","title":"arXiv preprint arXiv:2504.19413","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.904047Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:a09a140b006cce4e8c97b1bd81c0ab167b4dae693a4cf68d54e671591d89618e","observation_id":"bc1df7c6-0c19-454d-b6f0-3c39fbc4c786","resolution":{"observed_at":"2026-08-05T11:11:40.904047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.14228","last_updated":"2026-07-02T17:12:13Z","snapshot_observed_at":"2026-07-12T21:00:43.195941Z","submitted_at":"2026-04-14T17:59:37Z","title":"Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.14228","snapshot_observed_at":"2026-08-05T11:11:40.935774Z","title":"Yue Liu, Hongcheng Gao, Shengfang Zhai, Yufei He, Jun Xia, Zhengyu Hu, Yulin Chen, Xihong Yang, Jiaheng Zhang, Stan Z Li, and 1 others","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.935774Z"},"links":{"cited_paper":"/paper/2604.14228","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:06409f92c60e28c502313fb415143f03bdff2d32b0e26aa9e6259d3a13655170","observation_id":"252e3da5-5bdb-4bae-9db2-6228be2a13d7","resolution":{"observed_at":"2026-08-05T11:11:40.935774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-07T23:12:33.394256Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":3,"verified_fuzzy":6},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2608.03844."}