{"as_of":"2026-08-19T06:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3e337f2799b0a08ae938c68cb076c91a424dbb55eac4e046b240add6668b03cb","coverage":[{"denominator":103,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T14:19:14.004821Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.11274/citation-record","integrity":"/paper/2608.11274/integrity","json":"/paper/2608.11274/citation-record.json","paper":"/paper/2608.11274"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.363913Z","title":"Incident 622: Chevrolet dealer chatbot agrees to sell tahoe for $1, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.363913Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:4792f7a196ee402c0812d23e79a4ed5aa4cf5f42622e9063cf1803d33632f735","observation_id":"449d71cd-af24-4bce-905e-3d0f767b94e5","resolution":{"observed_at":"2026-08-15T14:19:13.363913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.370084Z","title":"Incident 631: DPD chatbot malfunctioned and swore at customers, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.370084Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:5eac4c568867297774bd1b5548b29c50fca4a73d29af57f07bf2e4215842abc0","observation_id":"c1ab0b82-12c0-4dd7-8dbe-f8d9480753df","resolution":{"observed_at":"2026-08-15T14:19:13.370084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.379621Z","title":"Incident 1152: LLM-driven Replit agent reportedly executed unauthorized destructive commands during code freeze, 2025.https://incidentdatabase.ai/cite/1152/","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.379621Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:188e1dfc0fb622e428cc1463fe4be6b0a628d27d9c8f2b40cca6fc3e4ee94cfd","observation_id":"f83fd8b2-e21e-482c-ba39-757c2b287e9d","resolution":{"observed_at":"2026-08-15T14:19:13.379621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.385430Z","title":"Alur.Principles of Cyber-Physical Systems","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.385430Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:80be8ee1f1ed104007a25b4c968fb54bb67e37a362f42b992043b691ff99634d","observation_id":"843c32ab-8190-4b4b-b3cc-3251abeec668","resolution":{"observed_at":"2026-08-15T14:19:13.385430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.391141Z","title":"Anderson.Security Engineering: A Guide to Building Dependable Distributed Systems","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.391141Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:55537871f529b0c5034b0643568c8e24b35bec8be902d62f88c7e5d78779184e","observation_id":"481d0a6d-556c-438c-905b-f6755d7a2e07","resolution":{"observed_at":"2026-08-15T14:19:13.391141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.396657Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.396657Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:d115585c29d2e7ec2656546e627beaa3840a14b93d7e5252323ae3f7c9ba0c94","observation_id":"11af2645-9bc0-481f-bd95-a89290be909f","resolution":{"observed_at":"2026-08-15T14:19:13.396657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.404241Z","title":"Claude 3.5 sonnet model card addendum.Anthropic Technical Report, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.404241Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:00cadc668a11fe6a86758a0ab42a97a78d5eff2e534028caedacd98a1a4c3ece","observation_id":"8bd41e07-c458-4357-b017-1516a2d3e4e1","resolution":{"observed_at":"2026-08-15T14:19:13.404241Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.409327Z","title":"Cursor CLI output format reference, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.409327Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:636e6c62e2ae8982cc5a3365dc8a32ea3189cbd4d210393cade9757cbaea8f43","observation_id":"787f9c8f-d96f-49e1-9d58-8bcceaa02996","resolution":{"observed_at":"2026-08-15T14:19:13.409327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.05862","last_updated":"2022-04-12T15:02:38Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-12T15:02:38Z","title":"Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.05862","snapshot_observed_at":"2026-08-15T14:19:13.414870Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.414870Z"},"links":{"cited_paper":"/paper/2204.05862","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:7cba8a7db96d9b9aadf36cfc5dcf6300815c070c72ba7d492dabe67b4ef6ddf2","observation_id":"d896fe0c-1514-4bb3-b4f6-fa32e6d607bb","resolution":{"observed_at":"2026-08-15T14:19:13.414870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-16T03:49:00.703994Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-15T14:19:13.420823Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.420823Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:28d8c81ed70cc594b063bdfb16492d55cc93fc82a5f627d7882c366c1601d0e2","observation_id":"32a8c30e-6f3f-40f5-ac86-a9d52f3b5156","resolution":{"observed_at":"2026-08-15T14:19:13.420823Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.11926","last_updated":"2025-03-14T23:50:34Z","snapshot_observed_at":"2026-08-17T15:42:03.133713Z","submitted_at":"2025-03-14T23:50:34Z","title":"Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.11926","snapshot_observed_at":"2026-08-15T14:19:13.429309Z","title":"Baker, J","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.429309Z"},"links":{"cited_paper":"/paper/2503.11926","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:38f338853d1f7fa1064b9020eccf3b9fed22e8326bf197094856ec711f4155c0","observation_id":"d57e0c2d-52e1-46b6-93f8-2017cce3a708","resolution":{"observed_at":"2026-08-15T14:19:13.429309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.435975Z","title":null,"venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.435975Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:67578c733f76fb9cc6b2e38efb93b7c421caafcfe3708d7103191fd4d70c4658","observation_id":"ea0cc557-e7d8-4bfe-959a-7d19bd1fc568","resolution":{"observed_at":"2026-08-15T14:19:13.435975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.442474Z","title":"Bishop.Computer Security: Art and Science","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.442474Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:cd5a554cc1275e9a6690cb896e3cea71917c8ce315b42d23b01814f9ba32d1d9","observation_id":"41e12a85-1b5d-44e1-b6cd-74288fe305f9","resolution":{"observed_at":"2026-08-15T14:19:13.442474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.448879Z","title":"Bricken, A","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.448879Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:86a589c5fd28e7d9825356348113423dd8d1a7496b7bc61a32b1754a88676fd4","observation_id":"c8bd34c8-0e5a-48c8-b8ae-576318e02a79","resolution":{"observed_at":"2026-08-15T14:19:13.448879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.454815Z","title":"Burke, H","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.454815Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:9f40c7f045b3c764b1e2a5e45c53464aee4b9735a4c620749adbd8a05183e32d","observation_id":"93745e61-d63a-4e0a-b6b2-e0274edb82c9","resolution":{"observed_at":"2026-08-15T14:19:13.454815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.460522Z","title":"Carlini, M","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.460522Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:d05c913e88d137c76b0641e09dd46a77bad5c7abd41afc0f39dbab87d8466402","observation_id":"28c0d8d6-fb6c-4710-8276-c2b504988cc2","resolution":{"observed_at":"2026-08-15T14:19:13.460522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.466753Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.466753Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:6cd1cebfe9a7313d42381bf11da3465e10c17d49e4497c1f8471562d07879ea0","observation_id":"19ff294a-5e4e-4f87-8bd5-38750ee874de","resolution":{"observed_at":"2026-08-15T14:19:13.466753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-15T14:19:13.473161Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.473161Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:2b5f1165aefcafb9e672b70f859381771619c2e9fa4fe1c3a0381ed2aea7678e","observation_id":"b6a9c064-3417-4b40-b15a-311292aeb1a0","resolution":{"observed_at":"2026-08-15T14:19:13.473161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.479129Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.479129Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:4c16f4c86482ca2035fde79bbad151999f3bca0e37f49700b7cacfb590092a41","observation_id":"4ec9e053-9424-4206-bed4-98ab0f0f5e11","resolution":{"observed_at":"2026-08-15T14:19:13.479129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.484569Z","title":"Moffatt v","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.484569Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:50a07bff3d1e071b0adf83629109eb18bf70db5b2d4d63102fa01ae46eb2b644","observation_id":"08bb434a-f3da-44eb-94fb-c902ae71fedd","resolution":{"observed_at":"2026-08-15T14:19:13.484569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.494790Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.494790Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:9444ea4b39bcca0849f3cd321a2486237695bcfb1ef2833f46dcfaf6c5e4d466","observation_id":"ad939f0b-0446-4f08-9c5f-1c35dfccd802","resolution":{"observed_at":"2026-08-15T14:19:13.494790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.499446Z","title":null,"venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.499446Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:5b8d7dbc11bfa0b1c9a94eb57546a06ccd7a976ae40f11511ddbf5539d017492","observation_id":"f961d146-13a8-491a-83c8-3540e91039c7","resolution":{"observed_at":"2026-08-15T14:19:13.499446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.504436Z","title":"claude-code-log: Convert Claude Code JSONL transcripts to HTML, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.504436Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:c425557ab119a8d37141eb11728c494c420caaf21b99698b9fcaba58b5d6896d","observation_id":"05dc8549-d19e-4ed1-9072-2b303d85447b","resolution":{"observed_at":"2026-08-15T14:19:13.504436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.06624","last_updated":"2024-07-08T13:35:00Z","snapshot_observed_at":"2026-08-16T16:31:21.993356Z","submitted_at":"2024-05-10T17:38:32Z","title":"Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.06624","snapshot_observed_at":"2026-08-15T14:19:13.509712Z","title":"Dalrymple, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.509712Z"},"links":{"cited_paper":"/paper/2405.06624","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:560c43457e034ad9ccf5531da8677ce25f2b744419e5e9f46ec9c612b4bc2e78","observation_id":"d51ffffa-a883-4d2b-a155-8a4ffc41182a","resolution":{"observed_at":"2026-08-15T14:19:13.509712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.515708Z","title":"Elhage, T","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.515708Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:e6237818a62f7dd02d9e81d5b3415f0d151413c4954e6bf0b1b7ff84f6ecfb5d","observation_id":"0c660fe8-5e3e-47a7-8178-33a246c3b50e","resolution":{"observed_at":"2026-08-15T14:19:13.515708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.520878Z","title":"Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (AI act).Official Journal of the European Union, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.520878Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:4a7b2e7db0108a8ee22b81cac1677e7af515aaeb1f5ab40b00bd9a040e469315","observation_id":"83e6379b-65cb-4997-8986-e6e5dc45ae11","resolution":{"observed_at":"2026-08-15T14:19:13.520878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.526473Z","title":"Fowler and M","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.526473Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:f8ff6fb7057f2a7225fe2d3b71f5f16cf5db6ed782eb0655e7a4f328be246c45","observation_id":"4d7a03f7-3091-4909-838b-e3d39c6e2769","resolution":{"observed_at":"2026-08-15T14:19:13.526473Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.531892Z","title":"Scaling laws: Eugene V olokh on navigating libel and liability in the AI age, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.531892Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:f0b290ed010827615bd66e18d64fe7eb6b5abdc69bf018d6447b47f197ac54ac","observation_id":"9e6bc882-05c8-4323-adfd-b4f0a136ab52","resolution":{"observed_at":"2026-08-15T14:19:13.531892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.07858","last_updated":"2022-11-22T19:12:57Z","snapshot_observed_at":"2026-08-17T08:35:42.452149Z","submitted_at":"2022-08-23T23:37:14Z","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.07858","snapshot_observed_at":"2026-08-15T14:19:13.537474Z","title":"Ganguli, L","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.537474Z"},"links":{"cited_paper":"/paper/2209.07858","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:ecba9b171146c21f8a96abb6634127143a9776b800e7654068b0821688842eb6","observation_id":"a16c3b89-9865-418b-8295-37489f0f862c","resolution":{"observed_at":"2026-08-15T14:19:13.537474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.483774Z","title":null,"venue":null,"work_id":"25cf4a1f-544a-4b0d-b3dc-72507f677e24","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.543513Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:8590f9aceb940b8fb66cfcfd5872f8bbd59311ebe02f04d45d4536c0dbee94c1","observation_id":"2797d8df-1484-44e1-9f12-226e3612eb6a","resolution":{"observed_at":"2026-08-15T14:19:16.492099Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.450528Z","title":"Gauthier","venue":null,"work_id":"4bd89e8a-e90d-4b17-908f-d0ce377de7ba","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.548339Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:2ec9a17469967a5b9d6717b60c26cf83c90d285be2c60aacb602db1a9bc1c72f","observation_id":"607e55b2-5fe5-4b50-8bbb-7a9a7539fa38","resolution":{"observed_at":"2026-08-15T14:19:16.462278Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"en/2026022","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:14.803023Z","title":"Amazon experiences AWS outage believed to be caused by AI tools, 2026","venue":null,"work_id":"8688643f-1573-4b05-9a74-13e57056b634","year":2026},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.553062Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:a2041d9d3853c1de756ec6ee0bf9e9ca5de5fdf191abd034cfbf674565939ca6","observation_id":"d6b4f02f-af83-4d67-8492-be17a4662931","resolution":{"observed_at":"2026-08-15T14:19:14.814918Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.419904Z","title":"Tracking GitHub Copilot’s sessions, 2024","venue":null,"work_id":"9dfed92f-8189-4ae8-b4b9-51b800b1de3d","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.558277Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:9a3ceef6679464c806ad864b8a373ddc4aacdc136b007b0d562ec35bcf399201","observation_id":"bd468bd4-2e91-4674-b40b-168f3a4f5487","resolution":{"observed_at":"2026-08-15T14:19:16.427259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14093","last_updated":"2024-12-20T02:22:19Z","snapshot_observed_at":"2026-08-13T11:12:58.507759Z","submitted_at":"2024-12-18T17:41:24Z","title":"Alignment faking in large language models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14093","snapshot_observed_at":"2026-08-15T14:19:13.563860Z","title":"Greenblatt, C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.563860Z"},"links":{"cited_paper":"/paper/2412.14093","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:2ced78a0ff645c99f5bf3c0d6d071fade4266662c7d4c6cffc5960a613485bb9","observation_id":"f9213660-11bc-473c-842a-b5ed8c9cd328","resolution":{"observed_at":"2026-08-15T14:19:13.563860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.390632Z","title":null,"venue":null,"work_id":"3175f86f-71d5-430e-9460-08b7ce1f1176","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.570293Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1adddd712d219333ae7410aba73fbe4b3ee1830ae591f2a31ba86a39158bec17","observation_id":"b1a7d303-c2bb-4073-a3a2-f77e218946b2","resolution":{"observed_at":"2026-08-15T14:19:16.397836Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.365917Z","title":"Cursor IDE support hallucinates lockout policy, causes user cancellations, 2025","venue":null,"work_id":"8fd26c11-0d4b-44c7-bf55-1d4aef60a3d4","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.578110Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:c190ad9e39497229d9ca1517d56d29d6f1d93a851bfa3cd159e52a0214686d40","observation_id":"826c1b20-29b6-4887-9921-9c3d7aa06bd3","resolution":{"observed_at":"2026-08-15T14:19:16.372883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.336181Z","title":null,"venue":null,"work_id":"e34a04bd-17a5-4989-ae9b-877b6a047312","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.585846Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:34881e8ef0057558a324d32ca6f7a219be1df8f90d2faf900540e90d404daf55","observation_id":"14b76236-b1bf-4bae-9d1b-08978a960d97","resolution":{"observed_at":"2026-08-15T14:19:16.343279Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.308391Z","title":null,"venue":null,"work_id":"4cb3ba1a-b629-4c2b-8bd4-da78d97b1a68","year":1985},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.594864Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:5b464466e761b1d3c226c9f6c36ba0ceb4678fafc4400674f17750676ada8a4d","observation_id":"d482a7e1-fd71-48f6-8c0a-a2f9f8a1c9c4","resolution":{"observed_at":"2026-08-15T14:19:16.316434Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-08-15T14:10:05.296241Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-15T14:19:13.601493Z","title":"Hubinger, C","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.601493Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:203100e0abe58a662d707ea6066563e8665bd68dc03a62a5c1450efcb1457b19","observation_id":"59200826-9f54-46be-a9ea-6eeab349cb2d","resolution":{"observed_at":"2026-08-15T14:19:13.601493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.283265Z","title":"Humble and D","venue":null,"work_id":"0621bf33-aacf-41f7-9c57-db7ee88f2c86","year":2010},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.606923Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:b9b63d4f153851a15581985e83d1c9b90b3571c2851bd326d11cf03075f6e641","observation_id":"ba981562-dabe-4ac1-9a91-9949be5dced0","resolution":{"observed_at":"2026-08-15T14:19:16.291087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-15T14:19:13.614533Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.614533Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1ea4240d391bc3d3090ae7b39cee401a2e7272d8dad191b4b9d1924b78658f15","observation_id":"647eb7ab-67a5-4c28-809a-7929790e0c19","resolution":{"observed_at":"2026-08-15T14:19:13.614533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.255527Z","title":null,"venue":null,"work_id":"884cf02f-2509-4e7c-8e28-f0a436ba4b76","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.620535Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:fb7194570e093be848cbbede682acd4dd34610b10938077c13f66145be8df03d","observation_id":"6db12924-2562-4728-8e98-9dc4f10e8115","resolution":{"observed_at":"2026-08-15T14:19:16.263181Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.216414Z","title":"Kent and M","venue":null,"work_id":"e746e8a2-3eab-494c-ad3c-2870f2c5bc11","year":2006},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.631244Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:df5d807d8d5f4e02312f6c3b9a2fa4a640ff4c194a3e5f29cc7443c8ac82c8cd","observation_id":"f9d9f766-9444-4f59-8b91-85b9e3587c38","resolution":{"observed_at":"2026-08-15T14:19:16.230946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.166870Z","title":null,"venue":null,"work_id":"7aaec8fc-4ef3-4083-b561-6de423d2f69d","year":null},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.637494Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1fa605feb8e9347956869b77444b0457a13b0a32d4e87a167838e54f308d66ec","observation_id":"3b6aada0-f6bc-4719-a952-fb3fec25c4c2","resolution":{"observed_at":"2026-08-15T14:19:16.177973Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.135289Z","title":"Metr’s observations of reward hacking in recent frontier models, 2025","venue":null,"work_id":"97225e7e-a52b-4cab-80cb-7486c0da1225","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.645514Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:208c6beae09fe1b7309f61a3867afeea822c66b365ae1f96e4197505a02bd2e3","observation_id":"fab181d6-dc20-4357-bba6-07edc77db1b3","resolution":{"observed_at":"2026-08-15T14:19:16.144969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.104204Z","title":"Krakovna, J","venue":null,"work_id":"f16fdd5c-3f09-49ed-a7c5-6b71216047d5","year":2020},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.653020Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:7c91faa487ffbbf840eb8d61aecc75a91e65f69f074153b87097d48376ea50ab","observation_id":"008dbdb3-f542-4897-a3a9-4530d36641f3","resolution":{"observed_at":"2026-08-15T14:19:16.113291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.076784Z","title":"Kupferman and M","venue":null,"work_id":"7ac88f1b-145a-4f1f-a3f2-efa323451d60","year":2001},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.659030Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:8f495cd1b64dd3c6fc4fac41d783ee5e4a8346545c00539c77c19c107623347d","observation_id":"f00b8d74-2042-425e-ba3d-efcbbd881f5f","resolution":{"observed_at":"2026-08-15T14:19:16.084455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.040252Z","title":null,"venue":null,"work_id":"8b96b788-c118-4224-a911-4cd1be6fafc9","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.664734Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:bd31e66daa35e4676a543e5bcc9551910c47e0eb831df80cd55f6f9d9fa1c543","observation_id":"146a0071-30d7-4c12-81a9-771dac776786","resolution":{"observed_at":"2026-08-15T14:19:16.050980Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:16.012738Z","title":null,"venue":null,"work_id":"7d8ba04d-7690-45d6-85cc-21cae526d1a2","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.671476Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:369055ab9d18f60211f6adea73173d8415005d7d2bd26658ead158a200428b96","observation_id":"2d0826db-f657-4363-ad14-aface78d1643","resolution":{"observed_at":"2026-08-15T14:19:16.021805Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00267","last_updated":"2024-09-03T14:01:54Z","snapshot_observed_at":"2026-08-15T10:07:24.540946Z","submitted_at":"2023-09-01T05:53:33Z","title":"RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedback","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00267","snapshot_observed_at":"2026-08-15T14:19:13.678318Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.678318Z"},"links":{"cited_paper":"/paper/2309.00267","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:ae2a17c265c9da542c883ecb6a7e258f4613d61466aaa358dc803a7373ae5556","observation_id":"6a2e64a5-86ef-4f2d-823b-9e8389c5da08","resolution":{"observed_at":"2026-08-15T14:19:13.678318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.984634Z","title":null,"venue":null,"work_id":"5681ccd1-9c14-4c0c-912e-a810b71dc77a","year":2016},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.684448Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:00f2baa42a37b984b608671c0f60c58f8af3a1975830bfabed746e0315c65716","observation_id":"2c36c004-fd47-42a3-9f2d-1ac7237d8172","resolution":{"observed_at":"2026-08-15T14:19:15.994487Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.948841Z","title":"Leucker and C","venue":null,"work_id":"80e8a45b-3418-4ff6-b9ab-f3a624588502","year":2009},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.689649Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:0e1d4e3fae983ca862fb6f393c835d7dbece76dedb3430c6b1459f6530ad8b46","observation_id":"a22eb722-6441-4efd-acf2-8be14d14da10","resolution":{"observed_at":"2026-08-15T14:19:15.957381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.694535Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.694535Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:64bfd56895ba588cd33048d2ccfd76a9c14c5cf5afda0654df94e78418b1e9ae","observation_id":"6d9f6346-046b-45a8-a25c-ebf7d260740f","resolution":{"observed_at":"2026-08-15T14:19:13.694535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.906697Z","title":null,"venue":null,"work_id":"b486b645-53d0-4425-ab4d-d728da1c68ac","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.700011Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:005a4a373918b2f47d23b60c5e22659a3e987b3e2cda1eaecd7147ef7c5c2741","observation_id":"7c8d4f2d-b1e1-4e22-9b41-431b7bc9b40d","resolution":{"observed_at":"2026-08-15T14:19:15.913924Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04249","last_updated":"2024-02-27T04:43:08Z","snapshot_observed_at":"2026-08-16T09:07:20.265665Z","submitted_at":"2024-02-06T18:59:08Z","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04249","snapshot_observed_at":"2026-08-15T14:19:13.706357Z","title":"Mazeika, L","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.706357Z"},"links":{"cited_paper":"/paper/2402.04249","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:9b0adccf84aa2af03923f17aedbcc9d91733eef040ea6f82b75792cf717a7e2f","observation_id":"1c901f69-299f-43a1-97b0-3555eff0071d","resolution":{"observed_at":"2026-08-15T14:19:13.706357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.885864Z","title":"McGregor","venue":null,"work_id":"594a4335-58fc-427e-8352-a25ec5379fb0","year":2021},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.713244Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:7585bb26723aaa4c9bd4e59b8ca188ccdaa8308251f832d44c414e5e9ee6c9a0","observation_id":"b0096995-792c-4392-af30-e72f00db3df4","resolution":{"observed_at":"2026-08-15T14:19:15.892904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.861841Z","title":"Meinke, B","venue":null,"work_id":"1553c69b-cfc2-46af-921f-7749c5a5df46","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.718160Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1cd1ba0f98904f66d949b3da4da47d6ecb6798853e89b69cf5e57163656e6312","observation_id":"d41f58a9-7938-4021-8c95-4fd7b7f09d03","resolution":{"observed_at":"2026-08-15T14:19:15.870090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.829738Z","title":null,"venue":null,"work_id":"5f369450-60c0-4e41-96f7-b1966e7daa1b","year":2014},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.723693Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:41eb0669c9aa90ea46234ac980be220d5ec8ec2d63b96c32fb37dd58ce047d4f","observation_id":"e4d2ec69-0ede-4330-8af6-2583379ba992","resolution":{"observed_at":"2026-08-15T14:19:15.840822Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.809032Z","title":"Llama guard 3.Meta AI Technical Report, 2024.https://www.llama.com/docs/model-car ds-and-prompt-formats/llama-guard-3/","venue":null,"work_id":"9f820468-e328-4ac1-96f7-4846fa9bea9c","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.731458Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:479f0c76cdacc9c8770225ace9fe71d57a6486f44be7165da9a93db76a50dd7f","observation_id":"78c5b4f5-9f6a-4df2-aff2-6f1306d22cd2","resolution":{"observed_at":"2026-08-15T14:19:15.814781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.790330Z","title":"Nanda, L","venue":null,"work_id":"c9d9e8f7-7af2-47d1-a79c-cbbb6084e979","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.736922Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:a0b1d67670ab9645b52201ba23537a5144d95369631c1a685fac29f1efbc09b3","observation_id":"b5e1172e-b5c9-459c-84df-fe8b695521f0","resolution":{"observed_at":"2026-08-15T14:19:15.796473Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.770432Z","title":"Framework for improving critical infrastructure cyberse- curity, version 1.1","venue":null,"work_id":"f1e63a84-ee31-4993-a11f-6945ebc6589d","year":2018},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.742700Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:941ea18886790ff1b0ddfc24c0710e179e78e88d3752f1ad05eb23ca8818c17d","observation_id":"ff71ffe7-4365-46e4-afd1-bd46b8cd49d6","resolution":{"observed_at":"2026-08-15T14:19:15.776878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.747627Z","title":"Artificial intelligence risk management framework (AI RMF 1.0)","venue":null,"work_id":"b1a73940-6c13-44fb-8eb1-ef2e323a104c","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.747660Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:147e7cd4b5b6fc0501059322a545e82245996f2c82ef860accb0fcd9a4ee4066","observation_id":"0d828cbd-d76b-44af-91a5-741cdf015055","resolution":{"observed_at":"2026-08-15T14:19:15.754172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.723964Z","title":"ChatGPT wrongly accuses law professor of sexual assault, 2023","venue":null,"work_id":"99e3fa3e-f773-4ac8-a09f-d938ff11bbe9","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.753519Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:a83210e54884e0d265505a55c54145126fadae3281693b23ff0f71980bdea4cb","observation_id":"4ed172c8-146c-4911-a464-f720be08d607","resolution":{"observed_at":"2026-08-15T14:19:15.730450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.703749Z","title":null,"venue":null,"work_id":"0ff6947a-31f5-4db0-b6b6-bafdb19a467f","year":2020},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.760190Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1599aa839d1556b234744445510ff1a6a6b39ee8d9a3247ea55406f495c8a73c","observation_id":"8d9206c6-df64-428c-bbd8-cc9f7e5d501e","resolution":{"observed_at":"2026-08-15T14:19:15.709445Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-15T14:19:13.765269Z","title":"GPT-4 technical report.arXiv preprint arXiv:2303.08774, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.765269Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:65ef71994cc1003067c41c4015ccd2e5eba2a85404596a6722d566895f0d2f45","observation_id":"1acd86e8-ab82-4ed5-a9a7-6bc3aef8e2ba","resolution":{"observed_at":"2026-08-15T14:19:13.765269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.683909Z","title":"Codex CLI features, 2025.https://developers.openai.com/codex/cli/features","venue":null,"work_id":"2d2e2d64-a82c-4418-9643-f85c7c68dac2","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.771262Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:bf43f847cd9623570db3e9ae6b9a637d4849d886a363f30a6b838e10650f254f","observation_id":"49a61a66-d008-44a9-9961-405dfe183e12","resolution":{"observed_at":"2026-08-15T14:19:15.689475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.661124Z","title":"SWE-Bench Benchmark Evaluation, 2024","venue":null,"work_id":"bc1375b8-8ac8-45cb-9d17-13e52febae28","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.777797Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:51f70cec30a155eba59c9680b18fe36fdfdf2b27c3ff5195534a883553482c3b","observation_id":"128b59bd-d578-4fe6-bc84-91a9e3de3656","resolution":{"observed_at":"2026-08-15T14:19:15.666753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.638750Z","title":"Ouyang, J","venue":null,"work_id":"3a4b9df6-b9d6-4bc9-b4b3-ce879ebc2e26","year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.785532Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:29843c49dc183d2c8a96b33192e556cb416f4b8fbbcc20e9b3ca9055f955535b","observation_id":"e58c50ce-d6f1-4293-a784-04d8aab235f8","resolution":{"observed_at":"2026-08-15T14:19:15.647397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09251","last_updated":"2022-12-19T05:13:52Z","snapshot_observed_at":"2026-08-18T16:15:54.291044Z","submitted_at":"2022-12-19T05:13:52Z","title":"Discovering Language Model Behaviors with Model-Written Evaluations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09251","snapshot_observed_at":"2026-08-15T14:19:13.791329Z","title":"Perez, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.791329Z"},"links":{"cited_paper":"/paper/2212.09251","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:e9555b85a6af1db6122292e176b3239d3b23608c9ff16b566d6de13d933f5824","observation_id":"083c23b3-45e0-4a42-90cf-5814352e8c44","resolution":{"observed_at":"2026-08-15T14:19:13.791329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"com/7202312","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:14.517487Z","title":null,"venue":null,"work_id":"62c8db0e-ce25-4e1f-a067-437ae28c70c3","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.798151Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:9b12581e83b290e23488b4019b0fad74b46355645298a1a125708c65ce16aba4","observation_id":"f04bb7fd-7319-4ced-a27d-e81afd1c3207","resolution":{"observed_at":"2026-08-15T14:19:14.526976Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.608429Z","title":"Pnueli and R","venue":null,"work_id":"8cad590a-d542-402e-95dc-2d447ecdef6d","year":1989},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.804275Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:0274b582fb6c678fb58f5f61ac1cd07d6bbc29a2379ef79580ed32c237310da5","observation_id":"e0c0f51d-dae9-44c8-af6a-d19a560c3abd","resolution":{"observed_at":"2026-08-15T14:19:15.614741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.585644Z","title":"Provos, M","venue":null,"work_id":"c5c931e6-54e5-4d45-8099-e4e7e0d57ea8","year":2003},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.811738Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:8073ae78b556ac439b9703941d986f3a0ff246b064ff4b31b79400bd6dce765b","observation_id":"02a5a708-47a6-4117-b01b-83619eb5d08b","resolution":{"observed_at":"2026-08-15T14:19:15.590991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03693","last_updated":"2023-10-05T17:12:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-05T17:12:17Z","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03693","snapshot_observed_at":"2026-08-15T14:19:13.818100Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.818100Z"},"links":{"cited_paper":"/paper/2310.03693","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:add7602464500a65a2a2aa83ead5968c69da4d648ad97fe7a2768f1327b3f617","observation_id":"250cfaab-63c8-401b-bd14-76ee2e991516","resolution":{"observed_at":"2026-08-15T14:19:13.818100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.561515Z","title":"Rafailov, A","venue":null,"work_id":"2043c1b0-31af-4cc5-96c9-2d6da1a56d71","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.824322Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:7279c7140a631738c5b4216ace631a31a9265f029bf78dad3adcb472aed6a678","observation_id":"8459074b-1432-4951-a16b-eb91c2fa895f","resolution":{"observed_at":"2026-08-15T14:19:15.567145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10501","last_updated":"2023-10-16T15:20:30Z","snapshot_observed_at":"2026-08-16T14:51:42.822750Z","submitted_at":"2023-10-16T15:20:30Z","title":"NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10501","snapshot_observed_at":"2026-08-15T14:19:13.829661Z","title":"Rebedea, R","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.829661Z"},"links":{"cited_paper":"/paper/2310.10501","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:f596431f33777e378756021653d41d5848e7507969f706cfd91c1cc50e0cb6fa","observation_id":"03571801-fe91-4608-948f-f982897c8e80","resolution":{"observed_at":"2026-08-15T14:19:13.829661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.539158Z","title":"Reddy and A","venue":null,"work_id":"dc34a751-1fce-43d9-84b5-9ef0a2bfd5f4","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.836434Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:3c060d325642291ad9c62f24d32e6ea939a4a7048b20893123c5c8423b5d8b39","observation_id":"25e91600-2c4c-42de-9ba0-b71b0d95558b","resolution":{"observed_at":"2026-08-15T14:19:15.546211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.510862Z","title":null,"venue":null,"work_id":"0ba0d847-e8c8-4604-a863-ecc52d375418","year":2019},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.846572Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:4786f4921af583acc0f34352e028260b2606690a21577bedc0baa803f36c9fae","observation_id":"af9fe6f4-5e54-40de-b42b-acd7e9ebb66e","resolution":{"observed_at":"2026-08-15T14:19:15.520745Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.486660Z","title":"Robinson","venue":null,"work_id":"7325860c-f14c-4203-b60e-555d0c8c7d03","year":2026},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.853115Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:5c78d107a9eb56cb30d223cd74d4c713ee5f9cab1f81e7a7352410b8cd20ea22","observation_id":"62150ed3-0f2a-49da-b073-1f4de9abcef1","resolution":{"observed_at":"2026-08-15T14:19:15.494107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-15T14:19:13.859825Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.859825Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:789b0eab8575b922b7bb9f349ab6df41b5848832cbf5e8e2bb854a3a50f06678","observation_id":"f1638fce-bec2-4e81-b6e4-5734f4760968","resolution":{"observed_at":"2026-08-15T14:19:13.859825Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.457306Z","title":null,"venue":null,"work_id":"4c20e4bc-07a4-47e5-98e2-ef991b9891c2","year":1975},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.867788Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:b4e7ae01340062a319c04a8ce4e89320b148f6982a2cdc6077186464a4391cec","observation_id":"779109d4-8284-408a-aebe-1b518aa79e36","resolution":{"observed_at":"2026-08-15T14:19:15.472021Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.432861Z","title":null,"venue":null,"work_id":"8565e4da-7b8e-458d-abe8-344e0e9479ac","year":2010},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.875086Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:78cac819fea69874ad03d12f3670c94434b1d3725cbbfb62b1025189f83e8ef0","observation_id":"b779c20c-ec17-40f6-9b29-dd04f113f947","resolution":{"observed_at":"2026-08-15T14:19:15.438541Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13548","last_updated":"2025-05-10T07:10:46Z","snapshot_observed_at":"2026-08-14T16:46:25.561386Z","submitted_at":"2023-10-20T14:46:48Z","title":"Towards Understanding Sycophancy in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13548","snapshot_observed_at":"2026-08-15T14:19:13.880401Z","title":"Sharma, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.880401Z"},"links":{"cited_paper":"/paper/2310.13548","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1854d4246138ecd9d766cf4d14803a35923da40172f76b7133d2d2604f36644f","observation_id":"0bcd76f6-e3ac-4a7b-a8e9-c64f2a19270e","resolution":{"observed_at":"2026-08-15T14:19:13.880401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.405621Z","title":"Sharwood","venue":null,"work_id":"2bb2d57e-4894-466f-95d0-9809a7706d3c","year":null},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.886530Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:66f89c4eaa2b8fac1eaf022f935b123f4936494c8fb147f2ddddd725b0c5eefa","observation_id":"574972e0-1c78-4261-a972-7631964dcc8b","resolution":{"observed_at":"2026-08-15T14:19:15.413474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.365048Z","title":"Shavit et al","venue":null,"work_id":"25883530-1747-4ad9-9e47-29c09caa7bd6","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.899635Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:6d3a2d60109c40f10daa36065a0d3ba18d20a69587f6e8f066c1cade3927b9dd","observation_id":"eb9abfb2-6f1c-47d1-abad-2f1b880472d7","resolution":{"observed_at":"2026-08-15T14:19:15.371441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.344763Z","title":"do anything now","venue":null,"work_id":"80ba6b3e-2e96-455e-b8ae-822f3cad4f90","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.904688Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:b1da5653b5c401f2a5349d6a60110e51b4bdebcad0f2e97c3cc9a5fcd399b7ef","observation_id":"0013899b-85a3-4ce1-ac6e-4d2af1b237da","resolution":{"observed_at":"2026-08-15T14:19:15.350995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.309444Z","title":"Skalse, N","venue":null,"work_id":"c49eec42-d08c-40d4-a292-8c7cd64acac4","year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.910758Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:ba6c583445ca8c50d1524c2900bb083e52392b1c2fa74956ca231b20f6b377e6","observation_id":"caea7364-5a45-4cbe-8909-03661c91b86c","resolution":{"observed_at":"2026-08-15T14:19:15.323017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.280251Z","title":"Stiennon, L","venue":null,"work_id":"2435ae39-9683-436a-aee3-2a448f8346f8","year":2020},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.916421Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:b2dbbe8606c56d28ab779092660f604ddb8c5f5311ff1b0428ea22c699e07ea9","observation_id":"3c364802-eec7-4b6d-985d-7162aee549c0","resolution":{"observed_at":"2026-08-15T14:19:15.287454Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2024.12768","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:14.322272Z","title":null,"venue":null,"work_id":"0a0af0af-7f5d-47ce-97b2-48c5bd26fb5c","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.924164Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:76da05ef106550976daf58727f57e3ea31023c7656d3ceb6e223a17dc469adcc","observation_id":"8e78c707-bec2-4671-868a-d8259b85f6fc","resolution":{"observed_at":"2026-08-15T14:19:14.334812Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.251074Z","title":"Templeton, T","venue":null,"work_id":"3a332b82-fac5-4a05-bb03-0873e455a10d","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.931607Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:67ae22160f86ddd88cbd5de1f9016bff7510fa4899a2251307a0262ebfcf1341","observation_id":"d9579374-d049-48f1-86d3-7e38a3f02e13","resolution":{"observed_at":"2026-08-15T14:19:15.257243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.221253Z","title":null,"venue":null,"work_id":"cd3c00e6-2feb-4680-880b-46bbbb53bf25","year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.937890Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:d79ef92200ed92f29e889faa41e1ef105e9fe8eb6a388fb3a6be490d63389227","observation_id":"bc766391-3757-4d2f-8079-0d73cf1b2f32","resolution":{"observed_at":"2026-08-15T14:19:15.227550Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.188689Z","title":"Recent frontier models are reward hacking","venue":null,"work_id":"b672fdbc-0ff5-4b38-ac2f-a7f4ff3618c1","year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.943645Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:df19e83bbc3b69e9ce4d68d3012de296c8c6e4006fdf08b8527a5c2f06dcb3b6","observation_id":"4b444593-a4db-43fa-8e7e-af01a62f347d","resolution":{"observed_at":"2026-08-15T14:19:15.195866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.07090","last_updated":"2021-12-04T17:24:04Z","snapshot_observed_at":"2026-08-17T21:15:13.629353Z","submitted_at":"2021-11-13T10:56:58Z","title":"D$^2$LV: A Data-Driven and Local-Verification Approach for Image Copy Detection","version":2},"cited_work":{"arxiv_id":"2111.07090","doi":"10.48550/arxiv.2111.07090","metadata_source":"pith","pith_arxiv_id":"2111.07090","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"D$^2$LV: A Data-Driven and Local-Verification Approach for Image Copy Detection","venue":"cs.CV","work_id":"42d1ec75-3b84-4349-82bd-8ce7b1eeb701","year":2021},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.949193Z"},"links":{"cited_paper":"/paper/2111.07090","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:c24885d1d0a26049782ef5fc2f8f8336d9ccae66d3a1678d94a0122db7cc1613","observation_id":"d72e8010-6c07-41a6-af8b-07ab0469993a","resolution":{"observed_at":"2026-08-15T14:19:14.073142Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15223","last_updated":"2025-09-09T02:59:54Z","snapshot_observed_at":"2026-08-16T15:12:02.468501Z","submitted_at":"2025-03-19T14:02:21Z","title":"Are \"Solved Issues\" in SWE-bench Really Solved Correctly? An Empirical Study","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15223","snapshot_observed_at":"2026-08-15T14:19:13.956774Z","title":"solved issues","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.956774Z"},"links":{"cited_paper":"/paper/2503.15223","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1eb37d96cb9b4d3ca4e28463520c0fd4c387915bfd423e473c308dafe3f28712","observation_id":"7c35d54b-82b3-4d5d-85f2-ddb367d14286","resolution":{"observed_at":"2026-08-15T14:19:13.956774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.153131Z","title":null,"venue":null,"work_id":"431cf81e-bafb-4f8f-972f-2a35039203e8","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.965986Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:e7c294a29d771684d01789e58103f5561292c74b8f4795b74d6f915341c30756","observation_id":"a7d84a3b-a8dc-4882-a567-9ab7fd677461","resolution":{"observed_at":"2026-08-15T14:19:15.160226Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:13.971491Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.971491Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:4f87d49f8c9d973b7f8ae8d9a33ba330c7c4590ab91f0313c717e2233eb7e0c4","observation_id":"7e2e9e9a-7fe0-492a-a0a9-d4124f888d87","resolution":{"observed_at":"2026-08-15T14:19:13.971491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.11082","last_updated":"2024-06-03T12:19:16Z","snapshot_observed_at":"2026-08-16T15:39:11.892424Z","submitted_at":"2023-04-19T17:50:09Z","title":"Fundamental Limitations of Alignment in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.11082","snapshot_observed_at":"2026-08-15T14:19:13.977631Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.977631Z"},"links":{"cited_paper":"/paper/2304.11082","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:e73aba3ae74cfdc5c494f96a7484579b15f6ccdb31f1810d51549c4edc74f850","observation_id":"e726e422-6de1-4807-a43c-ae8942b85159","resolution":{"observed_at":"2026-08-15T14:19:13.977631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02949","last_updated":"2023-10-04T16:39:31Z","snapshot_observed_at":"2026-08-18T10:24:13.017257Z","submitted_at":"2023-10-04T16:39:31Z","title":"Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02949","snapshot_observed_at":"2026-08-15T14:19:13.984292Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.984292Z"},"links":{"cited_paper":"/paper/2310.02949","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:ce8df7367369e47587ac4d719ba7aa5dc36578d419bb0e8dded9bb048b67107b","observation_id":"933e9d9a-13e5-49af-ab4a-1157bbacc3ec","resolution":{"observed_at":"2026-08-15T14:19:13.984292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.111247Z","title":null,"venue":null,"work_id":"90f9ad29-ff34-4de1-9aa7-10071e24d8b8","year":2021},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.992674Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1dfae6711a0d288eac1ed0ba64e3ed1228dce149cb702bcbd473de096eba35f0","observation_id":"ac5ecb8a-d6f5-4ed7-8d00-2880bee74e46","resolution":{"observed_at":"2026-08-15T14:19:15.117217Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:19:15.087645Z","title":"hallucinates","venue":null,"work_id":"2919cf84-ece3-4b48-b7eb-d7ffc46e04f6","year":2024},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:13.999238Z"},"links":{"citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:1972a2e42a7596f8b84e1a743e22b5e8a7c287bef14cacb53a1c5e4b7a235ab2","observation_id":"cf794151-8f81-49e3-a304-ae80f65e6efb","resolution":{"observed_at":"2026-08-15T14:19:15.094474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.02825","last_updated":"2025-08-07T06:58:08Z","snapshot_observed_at":"2026-08-17T22:49:53.742436Z","submitted_at":"2025-07-03T17:35:31Z","title":"Establishing Best Practices for Building Rigorous Agentic Benchmarks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.02825","snapshot_observed_at":"2026-08-15T14:19:14.004821Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-15T14:19:14.004821Z"},"links":{"cited_paper":"/paper/2507.02825","citing_paper":"/paper/2608.11274"},"observation_digest":"sha256:4153fb890e90582dc3c724687ca7cdbd9db4e0a52812c7eb2eb7eb1d35a5d29e","observation_id":"e2b186c1-b8e7-4440-af39-d8191b3b9363","resolution":{"observed_at":"2026-08-15T14:19:14.004821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.11274","last_updated":"2026-08-11T08:01:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T03:07:49.206917Z","submitted_at":"2026-08-11T08:01:05Z","title":"Agent Safety Should Be a Runtime Contract"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":64,"verified_exact":3,"verified_fuzzy":32},"total_outbound_references":103},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 100 of 103 outbound references and 0 inbound Pith citation observations for arXiv:2608.11274."}