{"as_of":"2026-08-08T10:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:aa7f5f49c8fde30e722e11bc4bf7f2e8adae8f1030f106af41e4eee0da149281","coverage":[{"denominator":32,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":32,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T21:46:23.185376Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.05884/citation-record","integrity":"/paper/2608.05884/integrity","json":"/paper/2608.05884/citation-record.json","paper":"/paper/2608.05884"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.733731Z","title":"Permissive default allowlist enables unauthorized file read and network exfiltration in Claude Code","venue":null,"work_id":"8e075422-0c25-4973-8a25-6cebd12c16d3","year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.031735Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:f8882bd396d514065ee91f6cc7855212c617eba950efd7c2ee8932a891745f4f","observation_id":"5415756e-7ed2-4c3c-9b3b-729ecdec0aea","resolution":{"observed_at":"2026-08-07T21:46:23.737672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.723068Z","title":"Accelerating the adoption of software and artificial intelligence agent identity and authorization","venue":null,"work_id":"ff49f138-aa71-424e-9cc0-aafe31c61818","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.037423Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:405ad53e9e547e6e91401f88992d7f8839a98814739247dd983d3b8fd4aa8650","observation_id":"1c2e7a2d-8b3d-499c-aed1-a17b73d9d6bd","resolution":{"observed_at":"2026-08-07T21:46:23.726853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.712394Z","title":"CVE program glossary","venue":null,"work_id":"c0f22aab-05fd-4ae2-bd17-8cbc3b8b6c8f","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.046348Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:285693b0aa960d1380027b1a40f52483559ce1e233ddc383e492a1a99c610aa4","observation_id":"64eb9206-c389-450c-bcd7-87fe3c47336f","resolution":{"observed_at":"2026-08-07T21:46:23.716191Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.701260Z","title":"Agent baseline: Six security outcomes for safely building, deploying and operating AI agents","venue":null,"work_id":"ff71dc0a-0b5d-4ebe-b29d-15f65139c414","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.050508Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:5f823af0d0877c06166ee79e0fcbe8bd6b128ef7db5162a2f81855b696161e88","observation_id":"930953cb-2ee5-4d72-bb2e-5c977f8edd12","resolution":{"observed_at":"2026-08-07T21:46:23.705198Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.689225Z","title":"Johnson, Kelley Dempsey, Ron Ross, Sarbari Gupta, and Dennis Bailey","venue":null,"work_id":"7de112b8-75cb-478c-bf28-9b089510a9bc","year":2011},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.054324Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:ab0892572d6930adbeb732463619a79cfee39d90e2a35ccfa0037c13b45b88e5","observation_id":"1f5feeca-7050-4879-8650-638a5c4ffaa4","resolution":{"observed_at":"2026-08-07T21:46:23.693093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.678468Z","title":"LLM06:2025 Excessive Agency","venue":null,"work_id":"acc1297d-1ce5-42a4-bfff-34d4bb742b19","year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.066092Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:412bc1860bb89e79b8b0d320ced91a9b962fd277cbd60d139d4cd5f47197c8da","observation_id":"abecf350-9b96-4983-9a10-a0ac1664572d","resolution":{"observed_at":"2026-08-07T21:46:23.681955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.10043","last_updated":"2020-07-15T11:58:45Z","snapshot_observed_at":"2026-08-06T07:14:51.706871Z","submitted_at":"2020-02-24T02:33:01Z","title":"Complete Dictionary Learning via $\\ell_p$-norm Maximization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.10043","snapshot_observed_at":"2026-08-07T21:46:23.078142Z","title":"Haines, Somesh Jha, Richard P","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.078142Z"},"links":{"cited_paper":"/paper/2002.10043","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:446a611306fbee9e000fb357887f5726daf9412c0c2e9ff458aeeb24b5cce2fd","observation_id":"42e2e241-18c1-4abd-a900-e0060a5efa35","resolution":{"observed_at":"2026-08-07T21:46:23.078142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.667576Z","title":"Guide to enterprise patch management planning: Preventive maintenance for technology","venue":null,"work_id":"1551ef92-cc0f-4633-9557-8910a14db92f","year":2022},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.082061Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:e29904ce2ce1a8c9a554fe9485b7cccf08463a0223b17f279dc6d5a5aff8a020","observation_id":"932b6529-685a-418a-9d9c-4184cb5f23aa","resolution":{"observed_at":"2026-08-07T21:46:23.671347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-07-06T20:57:47.748881Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-08-07T21:46:23.092713Z","title":"Poskitt, and Jun Sun","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.092713Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:44628ac2916ba83daf40143524286f23d474ac0a9aa90edb7881928a565fdaf4","observation_id":"75c001a0-a75b-47d6-a6e3-251beac83376","resolution":{"observed_at":"2026-08-07T21:46:23.092713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.657314Z","title":"Cyber defense matrix","venue":null,"work_id":"d4d442e1-ea79-4304-b676-768ef61ab09d","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.104328Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:612871c62377e02800517d0244a2eac03a771481a91fd48f27bf4fa6e17d1125","observation_id":"96f6e19c-3e4f-4f76-b2e7-3adf4810215a","resolution":{"observed_at":"2026-08-07T21:46:23.660898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.646007Z","title":"AI agent remote code execution","venue":null,"work_id":"81301baf-bb89-4d27-9dee-d2b2d97b48e0","year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.107898Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:14a3b6c9633e146af659479ceb4854aec4f3b091146400ccc93f5d94ae162a42","observation_id":"cb7c2515-45dd-4fd0-ac2c-e99a6953accf","resolution":{"observed_at":"2026-08-07T21:46:23.650229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.115180Z","title":", howpublished =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.115180Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:375dbcd85794643ae11d28777a24975c014e1f48c2fefd764c52a91b3c0bcd1b","observation_id":"3276b1c2-7c82-4d44-9fcf-66944c7e54c9","resolution":{"observed_at":"2026-08-07T21:46:23.115180Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.118904Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.118904Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:e61697358b081317bf075cc2a5eeef7588c1a14390035e85e1ff487a2de869b2","observation_id":"b5cd30f9-2f84-4298-b025-caca076eeb17","resolution":{"observed_at":"2026-08-07T21:46:23.118904Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.620248Z","title":"2026 , month = jul, howpublished =","venue":null,"work_id":"8a6b6229-e23c-46e4-aadb-d4ddab6b6bc2","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.122223Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:4a3b4a8fbe86239a5a412d2ba1c164f9737eff1c1c8f9d7921bfdce890c4d7df","observation_id":"ebee3091-c85d-4e25-95d4-22842858a8b5","resolution":{"observed_at":"2026-08-07T21:46:23.624209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.609195Z","title":"2025 , month = aug, howpublished =","venue":null,"work_id":"c7ed9fcb-e012-4383-a438-cb79db88ceb4","year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.125718Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:32dac341fa84c2ff6d928b0fc5879bf46471b0f23f4147ae149d7e0802eb0d5d","observation_id":"739dbcfe-6dbf-4919-ab1a-3ffa606b8483","resolution":{"observed_at":"2026-08-07T21:46:23.613044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.129671Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.129671Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:b49fb0a1a781975e65ac5a5acc8f4989f3a0400df1a19201d7aba3a5a19cd1d4","observation_id":"7fb36911-593c-41d2-a412-80ee9afb4ae5","resolution":{"observed_at":"2026-08-07T21:46:23.129671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.590613Z","title":"2022 , month = apr, doi =","venue":null,"work_id":"97c1f8e3-a1e7-4de6-a1fd-e340e5aef7d2","year":2022},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.133320Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:63d8d13ef3fdcdd34c34661b78f6f8cef3e17ea2ef99bfe1008d821378553f5b","observation_id":"18313a73-227c-434a-906c-35357144d502","resolution":{"observed_at":"2026-08-07T21:46:23.594302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.136931Z","title":"Johnson and Kelley Dempsey and Ron Ross and Sarbari Gupta and Dennis Bailey , title =","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.136931Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:1cfe4896f7ca4358cdc829d97c9802574fb8dd397261c2fac22f05ee454bf1fa","observation_id":"bdc2018d-2675-4b72-bef5-1e09df9862da","resolution":{"observed_at":"2026-08-07T21:46:23.136931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.579562Z","title":"Haines and Somesh Jha and Richard P","venue":null,"work_id":"0f83d1bf-7aa7-41ee-b69d-0d8d57819628","year":2002},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.140659Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:77df4a6d72579e7cab2dcf749c8f3f32efec29a45bb0158fead8ef6bfe1c0c07","observation_id":"1f2dd371-a2fd-47a6-afc7-f937b711a170","resolution":{"observed_at":"2026-08-07T21:46:23.583226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.567520Z","title":"2026 , month = feb, type =","venue":null,"work_id":"09020817-974e-42fa-8c9e-1c97192b7337","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.144245Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:ab5ded9bec41edcbe795aa11d06f3fa9ad33f51d65b1b2c206c284fd49821eca","observation_id":"217393ac-46d8-491c-b418-cec6ad2f4f7c","resolution":{"observed_at":"2026-08-07T21:46:23.571886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09674","last_updated":"2025-01-16T17:11:21Z","snapshot_observed_at":"2026-08-05T21:29:57.971324Z","submitted_at":"2025-01-16T17:11:21Z","title":"Authenticated Delegation and Authorized AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.09674","snapshot_observed_at":"2026-08-07T21:46:23.147775Z","title":"arXiv preprint arXiv:2501.09674 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.147775Z"},"links":{"cited_paper":"/paper/2501.09674","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:a0590538f1113b56fdd5d250f151dc90da248818d1f7e664255ae7b47c190526","observation_id":"74dc51d4-9edb-4f76-955e-d8249283dfd3","resolution":{"observed_at":"2026-08-07T21:46:23.147775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.151426Z","title":"Sharma and Linxi Jiang and Zhiqiang Lin and Shuo Chen , title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.151426Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:a74db225b35a05b1b44e30ef228753d64c37da129437dfe9a6a54effa9dbbea9","observation_id":"512a8847-7ec1-4824-8100-9a21d45e4ff9","resolution":{"observed_at":"2026-08-07T21:46:23.151426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11003","last_updated":"2026-05-10T04:05:31Z","snapshot_observed_at":"2026-07-06T23:22:52.369277Z","submitted_at":"2026-05-10T04:05:31Z","title":"The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents","version":1},"cited_work":{"arxiv_id":"2605.11003","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.11003","snapshot_observed_at":"2026-08-07T21:46:23.259202Z","title":"The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents","venue":"cs.CR","work_id":"29b497eb-2981-40a1-a182-a36780bab43b","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.154924Z"},"links":{"cited_paper":"/paper/2605.11003","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:63930585ae10256702aaad78a4b589343cf1b57e6186df1f599896afb4e93d8a","observation_id":"1ff63302-8548-4a26-bae3-05156959092a","resolution":{"observed_at":"2026-08-07T21:46:23.263208Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.18583","last_updated":"2026-05-18T16:00:41Z","snapshot_observed_at":"2026-07-06T23:29:29.105126Z","submitted_at":"2026-05-18T16:00:41Z","title":"Overeager Coding Agents: Measuring Out-of-Scope Actions on Benign Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.18583","snapshot_observed_at":"2026-08-07T21:46:23.158456Z","title":"arXiv preprint arXiv:2605.18583 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.158456Z"},"links":{"cited_paper":"/paper/2605.18583","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:c7f1406a2ea4f4d86f8cdd41e1ae778632788f4b44142ac7bc0711c42811cf39","observation_id":"d11472dd-044d-4900-b953-607a114f83cf","resolution":{"observed_at":"2026-08-07T21:46:23.158456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.14859","last_updated":"2026-05-15T03:53:20Z","snapshot_observed_at":"2026-07-06T23:26:13.644646Z","submitted_at":"2026-05-14T14:05:58Z","title":"Do Coding Agents Understand Least-Privilege Authorization?","version":2},"cited_work":{"arxiv_id":"2605.14859","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.14859","snapshot_observed_at":"2026-08-07T21:46:23.245471Z","title":"Do Coding Agents Understand Least-Privilege Authorization?","venue":"cs.CR","work_id":"50c6d7c7-afef-4c9c-915d-4ba28a572e1c","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.161803Z"},"links":{"cited_paper":"/paper/2605.14859","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:fa9bb37fec2d29e016d55d65a13eec27eebbfbcf5ab7bebd83e7b30eb32fb9fb","observation_id":"b8763d81-1b0f-432a-8070-936b747ebbee","resolution":{"observed_at":"2026-08-07T21:46:23.249319Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.556718Z","title":"Poskitt and Jun Sun , title =","venue":null,"work_id":"e5815aaa-00d7-4cfc-8052-3de8732a94a2","year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.165381Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:7a194a05d2c36bab74a1be374e830d3df007823b12247f3d4050dc12331e472d","observation_id":"afc2c480-0158-4566-a2af-738301c2cfc6","resolution":{"observed_at":"2026-08-07T21:46:23.560382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.168974Z","title":"arXiv preprint arXiv:2603.20953 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.168974Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:19d766085b66a66e36872b0c4006cf17e26a5861b8d8e81e935b1721fd21afa4","observation_id":"9507c2c8-4bcb-4209-9305-bc8766478b75","resolution":{"observed_at":"2026-08-07T21:46:23.168974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.172245Z","title":"Proceedings of the 34th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.172245Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:4f8feb4e3e0437ec5559cd3f6c53c87ed12aef70bf46aaa4c79cb74f96ca08c7","observation_id":"488b57ee-d62f-4920-9e3f-555d9d1be740","resolution":{"observed_at":"2026-08-07T21:46:23.172245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.175452Z","title":"arXiv preprint arXiv:2603.16586 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.175452Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:ce5e5e0dde3a0023b093a1ddece32fcd2c76ae8ae523d9bbeb1dd2f219e03813","observation_id":"64c2d950-463b-454b-99b2-7d8d55e974cd","resolution":{"observed_at":"2026-08-07T21:46:23.175452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.22916","last_updated":"2026-07-29T14:54:52Z","snapshot_observed_at":"2026-08-06T11:57:54.131809Z","submitted_at":"2026-06-22T06:55:57Z","title":"Intent-Governed Tool Authorization for AI Agents","version":3},"cited_work":{"arxiv_id":"2606.22916","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.22916","snapshot_observed_at":"2026-08-07T21:46:23.228007Z","title":"Intent-Governed Tool Authorization for AI Agents","venue":"cs.AI","work_id":"b3b6a90e-1e94-4c84-8ae5-5a31f133ad54","year":2026},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.178867Z"},"links":{"cited_paper":"/paper/2606.22916","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:e26f584fc1df69934b61ca9650a1a9ec7f48c9afa75bd63f44abe658fdb169c4","observation_id":"fdc261ba-1e82-46d5-a9b2-c2aa5dc85c59","resolution":{"observed_at":"2026-08-07T21:46:23.233895Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.09329","last_updated":"2025-08-23T11:49:50Z","snapshot_observed_at":"2026-08-06T17:56:18.479848Z","submitted_at":"2025-07-12T16:11:07Z","title":"When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents","version":2},"cited_work":{"arxiv_id":"2507.09329","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.09329","snapshot_observed_at":"2026-08-07T21:46:23.443406Z","title":"When Developer Aid Becomes Security Debt: A Systematic Analysis of Insecure Behaviors in LLM Coding Agents","venue":"cs.AI","work_id":"868b3d72-3919-4b52-af31-1e750ca1569c","year":2025},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.182040Z"},"links":{"cited_paper":"/paper/2507.09329","citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:ed47751a95d2ec8611f6640a5c1e28ca6b0a01f55533d8889a6d52e40cbee2eb","observation_id":"b3f1c257-8c23-4208-ad9e-4c2310f8b43e","resolution":{"observed_at":"2026-08-07T21:46:23.447632Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:46:23.546090Z","title":null,"venue":null,"work_id":"037d35bb-525a-4791-9fd0-583957352e8e","year":null},"citing_paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-07T21:46:23.185376Z"},"links":{"citing_paper":"/paper/2608.05884"},"observation_digest":"sha256:d85067c1761fc476e759befa2464d24f91f7a4167ce0e66b34b401a0dbdc3591","observation_id":"1217cedd-1aae-45d6-8cb5-7b32995a9e36","resolution":{"observed_at":"2026-08-07T21:46:23.549537Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.05884","last_updated":"2026-08-06T11:06:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T10:15:55.287297Z","submitted_at":"2026-08-06T11:06:06Z","title":"The Vulnerability With No CVE: Managing Persistent Gaps Between Mandate and Authority in AI Coding Agents"},"reference_resolution":{"displayed":32,"state_counts":{"malformed_identifier":0,"metadata_mismatch":4,"parse_uncertain":2,"unresolved":11,"verified_exact":0,"verified_fuzzy":15},"total_outbound_references":32},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 0 inbound Pith citation observations for arXiv:2608.05884."}