{"as_of":"2026-08-11T17:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bc634691c4f7e96183481a91bce3d36f0e8eb77e4b12fd2975cebd4448697f17","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:56:02.868695Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.09828/citation-record","integrity":"/paper/2608.09828/integrity","json":"/paper/2608.09828/citation-record.json","paper":"/paper/2608.09828"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.297423Z","title":null,"venue":null,"work_id":"a687ab15-1af8-4c42-ba0a-2c5e8787cd94","year":1990},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.782067Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:18305518898f392f7581ab9c41b475b5595ad05a43004b47a87bf0872e84f967","observation_id":"6da49454-9acd-4bd0-99ac-6df259864ad0","resolution":{"observed_at":"2026-08-11T05:56:03.300914Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.287306Z","title":null,"venue":null,"work_id":"e5b5684f-cc94-4f58-8a38-6b682316595a","year":1990},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.787912Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:385e49954aee21b4e4ea2a5e08e18ac217e7292cff30bb1b8c1bdb7c0759bf12","observation_id":"0316ac36-b786-4fb1-8865-ffb46ec67915","resolution":{"observed_at":"2026-08-11T05:56:03.290911Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.276480Z","title":null,"venue":null,"work_id":"4eb1bcbb-dc6b-4101-8025-ebe3c54b49a9","year":1995},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.791840Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:caac132307d5138f381e018fd2462d881abeb79a1db627d010850440c1575a96","observation_id":"f1edf96b-34bb-4976-b671-2c845bd04637","resolution":{"observed_at":"2026-08-11T05:56:03.280322Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.795511Z","title":null,"venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.795511Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:01c56f879f5e787c8ad8f21568ff4df4a37e469ae38f479f53a5ea7a6f39c921","observation_id":"e60da237-f9f9-4b6b-96b2-aff2d395a5f8","resolution":{"observed_at":"2026-08-11T05:56:02.795511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.artint.2012.03.004","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.894241Z","title":"Rodriguez-Aguilar, and Carles Sierra","venue":null,"work_id":"e6cf7fbb-993a-42f1-8a50-3ae8ebf8c8c3","year":2012},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.799114Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:78de9a2bf7761cd1283072db8269207521da9e3c8dc6cc069290652319611f27","observation_id":"5071e760-b90a-4e09-8ffc-61fadd8fa9c4","resolution":{"observed_at":"2026-08-11T05:56:02.900068Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-11T05:56:02.802774Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.802774Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:5bae534c23fa1a02d5a3d93dd65988648d099fa57bce8f1009da4c71ea302240","observation_id":"22206f1f-1ffa-4351-8462-e80ba66f34e4","resolution":{"observed_at":"2026-08-11T05:56:02.802774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16339","last_updated":"2025-01-08T20:11:59Z","snapshot_observed_at":"2026-08-11T10:38:35.302365Z","submitted_at":"2024-12-20T21:00:11Z","title":"Deliberative Alignment: Reasoning Enables Safer Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16339","snapshot_observed_at":"2026-08-11T05:56:02.806840Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.806840Z"},"links":{"cited_paper":"/paper/2412.16339","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:f008472b5b26a186de400a8b50810a1bd75fdd0129d233481d0263d322282fcb","observation_id":"00dab705-8343-464f-8739-3326954e501b","resolution":{"observed_at":"2026-08-11T05:56:02.806840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-11T05:56:02.810420Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.810420Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:f5dc62f2548c38657a9bbafe979319db19379c9f4d01cf7c15b309537e6878d6","observation_id":"2d30ddbf-f8cd-48b9-8a35-85ba74f78460","resolution":{"observed_at":"2026-08-11T05:56:02.810420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.813937Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.813937Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:2a40e2b03ca2277a293e31425661eac315a94dd1b2513dccd8e547283b239f17","observation_id":"a797cea3-e608-4f53-b795-0a6540fca3d1","resolution":{"observed_at":"2026-08-11T05:56:02.813937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.26542","last_updated":"2026-07-01T06:30:43Z","snapshot_observed_at":"2026-08-09T16:36:11.288977Z","submitted_at":"2026-05-26T04:44:59Z","title":"ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.26542","snapshot_observed_at":"2026-08-11T05:56:02.817318Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.817318Z"},"links":{"cited_paper":"/paper/2605.26542","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:1ce9d3d8fdd5d5bc69932cfb37e393b8746a3b7afe0aa1e5b982f80cb65d48a0","observation_id":"c90ce8fa-8753-4989-aef4-0d9a43da82f9","resolution":{"observed_at":"2026-08-11T05:56:02.817318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.01236","last_updated":"2026-08-10T14:38:04Z","snapshot_observed_at":"2026-08-11T17:21:09.163314Z","submitted_at":"2026-05-01T03:16:35Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","version":2},"cited_work":{"arxiv_id":"2607.01236","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.01236","snapshot_observed_at":"2026-08-11T05:56:03.148688Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","venue":"cs.CL","work_id":"c86bf17d-9310-496e-8e4d-a9fe8eb0a684","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.820930Z"},"links":{"cited_paper":"/paper/2607.01236","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:e0d7066ae37663ec808e5f4fe56412a4f9d09adfc13cc6dce94c3f98e4e25cfc","observation_id":"7febcf1d-4c64-488c-8e2a-f3fa627f2daa","resolution":{"observed_at":"2026-08-11T05:56:03.152983Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19328","last_updated":"2024-05-29T17:57:30Z","snapshot_observed_at":"2026-07-06T18:22:10.094519Z","submitted_at":"2024-05-29T17:57:30Z","title":"Normative Modules: A Generative Agent Architecture for Learning Norms that Supports Multi-Agent Cooperation","version":1},"cited_work":{"arxiv_id":"2405.19328","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.19328","snapshot_observed_at":"2026-08-11T05:56:03.135082Z","title":"Normative Modules: A Generative Agent Architecture for Learning Norms that Supports Multi-Agent Cooperation","venue":"cs.MA","work_id":"c7b08d1e-1bd4-49fa-8a62-41109b9ccb5a","year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.824530Z"},"links":{"cited_paper":"/paper/2405.19328","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:993dadc7ff049a67ab112576cc7432444fc69250b9be02fd030d0701f7735250","observation_id":"c51de420-58fd-4c78-8297-4e37efe17e4c","resolution":{"observed_at":"2026-08-11T05:56:03.139163Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.828149Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.828149Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:b9d938f30dbdeed29e6cc3fcb5f3ff63ab123131e8a18174fb23f75887bd5b09","observation_id":"550ae035-be3b-4270-934f-2e8d8cc2dee1","resolution":{"observed_at":"2026-08-11T05:56:02.828149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2012.08630","last_updated":"2020-12-15T21:39:50Z","snapshot_observed_at":"2026-08-09T08:09:12.994031Z","submitted_at":"2020-12-15T21:39:50Z","title":"Open Problems in Cooperative AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.08630","snapshot_observed_at":"2026-08-11T05:56:02.831415Z","title":"McKee, Joel Z","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.831415Z"},"links":{"cited_paper":"/paper/2012.08630","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:c9cd31e3e28be7401f55fda71191532dd6acf28cc10400fd9be9626032e2e4a6","observation_id":"cffe1265-4564-4e66-9ccd-1759de66c0bb","resolution":{"observed_at":"2026-08-11T05:56:02.831415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.08426","last_updated":"2026-06-02T11:37:31Z","snapshot_observed_at":"2026-07-06T23:20:38.385189Z","submitted_at":"2026-05-08T19:37:07Z","title":"Mechanism Design Is Not Enough: Prosocial Agents for Cooperative AI","version":2},"cited_work":{"arxiv_id":"2605.08426","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.08426","snapshot_observed_at":"2026-08-11T05:56:03.032429Z","title":"Mechanism Design Is Not Enough: Prosocial Agents for Cooperative AI","venue":"cs.GT","work_id":"5a006590-2b51-4a46-9e36-58614ca10f74","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.835045Z"},"links":{"cited_paper":"/paper/2605.08426","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:e0948645e9a839287ece331b9048ee39ca0a7427f5952d64565684255afa54b2","observation_id":"a5a0e934-a8eb-48a1-81bf-02bb45895d98","resolution":{"observed_at":"2026-08-11T05:56:03.036676Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-11T05:56:02.838662Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.838662Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:b65e05d37de0bf0012487987b0d2e7149f4fc9dd7d5b8cfc9ebd64e0778f4c04","observation_id":"d5152a60-8481-47c3-ba8a-fe23512f6f52","resolution":{"observed_at":"2026-08-11T05:56:02.838662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-11T05:56:02.842418Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.842418Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:7130b791223d691991b446b1db6215e255c2277bf137188ecd71d914bdd1d726","observation_id":"5aa9538d-40ee-4634-8c7a-6386433d01e5","resolution":{"observed_at":"2026-08-11T05:56:02.842418Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"cited_work":{"arxiv_id":"2607.24625","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.24625","snapshot_observed_at":"2026-08-11T05:56:03.000496Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","venue":"cs.CR","work_id":"751daa42-cd5b-4b9d-a0da-9a9dde8348bf","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.846369Z"},"links":{"cited_paper":"/paper/2607.24625","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:2733f8358c4df0756944b92c642e87464116bb5898665b1cbc76955d294d9047","observation_id":"d2cbe207-0591-4469-8827-3455c6f9ad2d","resolution":{"observed_at":"2026-08-11T05:56:03.004575Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-08-11T01:49:44.988527Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.10481","snapshot_observed_at":"2026-08-11T05:56:02.850392Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.850392Z"},"links":{"cited_paper":"/paper/2605.10481","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:0a72c1e0c8bb63a0b78bb3a2e611f50b4f691adfefdf48bd925196079dfcf8d7","observation_id":"13d3b173-ac75-4c3e-b57a-be852552c0ba","resolution":{"observed_at":"2026-08-11T05:56:02.850392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.05440","last_updated":"2026-05-06T20:56:17Z","snapshot_observed_at":"2026-08-05T13:57:19.964395Z","submitted_at":"2026-05-06T20:56:17Z","title":"Authorization Propagation in Multi-Agent AI Systems: Identity Governance as Infrastructure","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.05440","snapshot_observed_at":"2026-08-11T05:56:02.854401Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.854401Z"},"links":{"cited_paper":"/paper/2605.05440","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:53d5dfa95d148833e2066b4f23d081794f3f12a7c666467b5d0400928698dda5","observation_id":"7507c7da-59bb-42ba-a3e6-8154a8af596e","resolution":{"observed_at":"2026-08-11T05:56:02.854401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.07695","last_updated":"2026-07-08T17:53:56Z","snapshot_observed_at":"2026-07-11T23:20:20.966286Z","submitted_at":"2026-07-08T17:53:56Z","title":"Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety","version":1},"cited_work":{"arxiv_id":"2607.07695","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.07695","snapshot_observed_at":"2026-08-11T05:56:02.967811Z","title":"Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety","venue":"cs.AI","work_id":"04d49e72-de99-4868-9457-ffbe5ec24c6c","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.858113Z"},"links":{"cited_paper":"/paper/2607.07695","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:dbe78018ecde243feb64e517bd02329a0b1a795d176e3bc0ec40cb6af8a628b6","observation_id":"419dd9b1-738f-4393-9187-40a6adad193e","resolution":{"observed_at":"2026-08-11T05:56:02.972675Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-09T06:04:04.401991Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.07097","snapshot_observed_at":"2026-08-11T05:56:02.861975Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.861975Z"},"links":{"cited_paper":"/paper/2607.07097","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:b57ef92f052da8da802091aa7acce24baf013e3e8b29820b68eb9cd73a4662b6","observation_id":"6282a09f-b320-462b-8a01-246956c331c3","resolution":{"observed_at":"2026-08-11T05:56:02.861975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.865464Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.865464Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:4deb74769c9db353cd00f59005e476a192d9ad4f84ab8d419f8ed51ad9a6db6e","observation_id":"2a4b6a8f-4e41-459a-938e-36fce6c9a768","resolution":{"observed_at":"2026-08-11T05:56:02.865464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.266654Z","title":null,"venue":null,"work_id":"91f6bf34-4e34-4947-b900-647d535247c2","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.868695Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:275d8916469878e72288e36c1e524dee3893060b94ccaca396484bc5ac36e4e7","observation_id":"2d80d210-93ee-4522-93e6-24218230b672","resolution":{"observed_at":"2026-08-11T05:56:03.270036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-11T17:21:58.457961Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":18,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2608.09828."}