{"as_of":"2026-08-17T14:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f727596e08953d8e82eaab95a40ba96b53f13222a17a02334fbd225803c5df0d","coverage":[{"denominator":67,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":67,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T14:18:55.426956Z","state":"measured"},{"denominator":67,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":67,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.11295/citation-record","integrity":"/paper/2608.11295/integrity","json":"/paper/2608.11295/citation-record.json","paper":"/paper/2608.11295"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:54.958176Z","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain, pp.\\ 755--772","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:54.958176Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:68b14711db9589468047b6be69d0109fa220aa5692d7411c1c231c7c5f9b5c27","observation_id":"486afe95-97a9-4d47-aeff-8c3667c0614e","resolution":{"observed_at":"2026-08-15T14:18:54.958176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-15T14:18:54.964745Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:54.964745Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:86cddf15556f6d4c0d52f7fa15101d3137f152bbeb1c5ffed93dd95ea165c9cd","observation_id":"bb00717c-eb95-4e5e-939c-5cc6ecfd2f69","resolution":{"observed_at":"2026-08-15T14:18:54.964745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:54.971333Z","title":"AgentPoison : Red-teaming LLM agents via poisoning memory or knowledge bases","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:54.971333Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:37ea3806f2ff6756009358268b58c204367393e2e948869d93bb93daf276241e","observation_id":"bd4d3c54-b264-4c7e-9bcd-037e32d5aad9","resolution":{"observed_at":"2026-08-15T14:18:54.971333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:54.978366Z","title":"Persistent backdoor attacks under continual fine-tuning of LLM s","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:54.978366Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:9cce80366c8f121d0e0e7094e6e4698517f19fd1f01ba668115422a4c72f99fd","observation_id":"85922a38-1c92-4735-a73e-34ff9d5a75e4","resolution":{"observed_at":"2026-08-15T14:18:54.978366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:54.986263Z","title":"AgentDojo : A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:54.986263Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:6c387902d598844d323922ca7ef53149f3be00e0df11a1b39a192a2d75240544","observation_id":"92c1ed5d-ea0d-496a-b202-fa50617baf3c","resolution":{"observed_at":"2026-08-15T14:18:54.986263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:54.999503Z","title":"Badnets: Evaluating backdooring attacks on deep neural networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:54.999503Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:03d18a7f81f6596f14136092f9d4fe57f3d7eb487723a0d5154c6ec3466f6469","observation_id":"3123663a-aadd-4182-9a49-9c85a55ca685","resolution":{"observed_at":"2026-08-15T14:18:54.999503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.823967Z","title":"Verbalizable representations form a global workspace in language models","venue":null,"work_id":"417cd8e9-42ff-499e-b64c-708189ce0f64","year":2026},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.006283Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:57e396d1fb9aab40d7f7176f21a3676c702dc9635cd816047a2dba916b372ff9","observation_id":"53ac1e4b-560b-4e38-b053-9d99afe13199","resolution":{"observed_at":"2026-08-15T14:18:56.830131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-08-15T14:10:05.296241Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-15T14:18:55.013000Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.013000Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:3f1550fe590e54a77fbd2850eae294f790815fa8e0817868d36a08673bce68d7","observation_id":"833f90a3-34b5-4a9e-9f1d-6d3991003db3","resolution":{"observed_at":"2026-08-15T14:18:55.013000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.04448","last_updated":"2026-04-20T12:06:00Z","snapshot_observed_at":"2026-07-06T22:41:05.793337Z","submitted_at":"2026-01-07T23:30:26Z","title":"Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models","version":4},"cited_work":{"arxiv_id":"2601.04448","doi":null,"metadata_source":"pith","pith_arxiv_id":"2601.04448","snapshot_observed_at":"2026-08-15T14:18:55.851543Z","title":"Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models","venue":"cs.CL","work_id":"2dc83b5b-10d3-4f07-83b6-9480d2654e2d","year":2026},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.020057Z"},"links":{"cited_paper":"/paper/2601.04448","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:0733598d545c66161e188e307842c13d750949c1b1a59894fd73ff99862b07ba","observation_id":"b4e6b14d-83cc-487a-aa9e-3eb632523487","resolution":{"observed_at":"2026-08-15T14:18:55.858924Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.025910Z","title":"Rusu, Kieran Milan, John Quan, Tiago Ramalho, Agnieszka Grabska-Barwinska, Demis Hassabis, Claudia Clopath, Dharshan Kumaran, and Raia Hadsell","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.025910Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:5888e132bcfd5dd2e76026bc12e22425b43badbd3cc525405731c43293b6e256","observation_id":"dfce79a6-fa4f-488b-9030-1c2cadce3a27","resolution":{"observed_at":"2026-08-15T14:18:55.025910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.048849Z","title":"Simulate and eliminate: Revoke backdoors for generative large language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.048849Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:2a4fa091727225616d95f08bd67db245a2d3711be91b2c53e3c9e440fde1a873","observation_id":"1fcee59d-c6e9-4674-96be-79eebe789088","resolution":{"observed_at":"2026-08-15T14:18:55.048849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.805760Z","title":"BadEdit : Backdooring large language models by model editing","venue":null,"work_id":"c2b812bc-4453-4dd4-b1c1-419810b78b61","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.054841Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:9ecfe29c805ccb7e24bf955054c0124e3209c9c254495ac0ac55dfd86615efe1","observation_id":"11e9ad1f-f6e5-4986-be13-e09c84a002f9","resolution":{"observed_at":"2026-08-15T14:18:56.811034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.786218Z","title":"BackdoorLLM : A comprehensive benchmark for backdoor attacks and defenses on large language models","venue":null,"work_id":"eb849c5b-a6e3-46ff-8e0a-5a7a5747fdae","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.062250Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:1538d6a5c529515a7cda4751cba720606903b2385ed6909868ebdd220660dbfa","observation_id":"76ae8fc6-bb38-4e26-89a9-a0a817e2d81c","resolution":{"observed_at":"2026-08-15T14:18:56.792734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2510.10265","last_updated":"2026-05-13T01:34:57Z","snapshot_observed_at":"2026-08-10T09:52:51.598646Z","submitted_at":"2025-10-11T15:47:35Z","title":"Backdoor Collapse: Eliminating Unknown Threats via Known Backdoor Aggregation in Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.10265","snapshot_observed_at":"2026-08-15T14:18:55.068432Z","title":"Backdoor collapse: Eliminating unknown threats via known backdoor aggregation in language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.068432Z"},"links":{"cited_paper":"/paper/2510.10265","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:721397400d06bbcbcf00d58ae05152e90b2d04be0a179896df608651547f4ee3","observation_id":"3c8c3fd2-897e-445a-8a18-d13565ffe278","resolution":{"observed_at":"2026-08-15T14:18:55.068432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.076732Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.076732Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:73be6ffdcaa65f5d867197cc77e64ffba8430337d7d1393032654d9889d5b8e3","observation_id":"a22eb920-6c96-4f60-870d-9ec0e530d886","resolution":{"observed_at":"2026-08-15T14:18:55.076732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.082599Z","title":null,"venue":null,"work_id":null,"year":1989},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.082599Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:2314b650f10edd7f4cdb622c47980f28ae665cf053000c14387f931e9e84bee3","observation_id":"e0c8b967-9326-4dba-ac85-f1250db5a17e","resolution":{"observed_at":"2026-08-15T14:18:55.082599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.767304Z","title":"On the exploitability of instruction tuning","venue":null,"work_id":"46666f1f-8dd4-4cc4-b495-112c211001e6","year":2023},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.108504Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:fc8943937b4e7e0935f36f873e7586fbb6299f87bc1eb0485133eff445f9a32b","observation_id":"bbd98176-640e-4e8d-b2f9-e4b48f09fced","resolution":{"observed_at":"2026-08-15T14:18:56.773039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.114927Z","title":"BadAgent : Inserting and activating backdoor attacks in LLM agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.114927Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:45eb03eba39532f48e77990e4209f9c725a16d5c524ca75b9bcabe58bf3360b1","observation_id":"63089d6d-7973-4647-b4f8-c89f8cba7068","resolution":{"observed_at":"2026-08-15T14:18:55.114927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.122623Z","title":"Backdooring instruction-tuned large language models with virtual prompt injection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.122623Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:b96f7c411d3badc02f3b35733d8782c58d7abc10411c5359fdaf83706b9aa24b","observation_id":"f75650ba-c4f5-4a46-ac0d-c50f0c2d6ee4","resolution":{"observed_at":"2026-08-15T14:18:55.122623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.135297Z","title":"Watch out for your agents! investigating backdoor threats to LLM -based agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.135297Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:bc2931c902a32ba658d1c551b284bfbd9541a39b78ca441fba23d384ccafcebe","observation_id":"9d08e68d-95a5-4f2f-bb6b-f404ea04d763","resolution":{"observed_at":"2026-08-15T14:18:55.135297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.141719Z","title":"AgentTuning : Enabling generalized agent abilities for LLM s","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.141719Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:a46d79be83bc976f0c3033227f7cabb57af1057ff9cbe76795dc5287920762a8","observation_id":"b8c2dd1b-2490-42e5-8a9c-1833d9cac457","resolution":{"observed_at":"2026-08-15T14:18:55.141719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2022.findings-emnlp.26","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.479150Z","title":"Fine-mixing: Mitigating backdoors in fine-tuned language models","venue":null,"work_id":"8e5aa6f0-080f-4444-a422-59b07c401e4f","year":2022},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.156680Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:51bb2f2b08655e53592ce8f7cfc32d62049f798e09cd84a16d24bdca705d59b8","observation_id":"ef839d45-51c5-4ae3-a3d3-7c3972afbc8a","resolution":{"observed_at":"2026-08-15T14:18:55.487008Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.165838Z","title":"LlamaFactory : Unified efficient fine-tuning of 100+ language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.165838Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:3825236d10d4c3c969b45aef9be85162f23e4f98c87b0b31365696ba5c641aae","observation_id":"37dc8192-a198-4c52-afd7-e70b2b8590d2","resolution":{"observed_at":"2026-08-15T14:18:55.165838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.172611Z","title":"Enhancing fine-tuning based backdoor defense with sharpness-aware minimization","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.172611Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:ae3f0d8ce3fca6f516ce23c61e7ac92876a79b2f9fc7dc64e5d833658ab4d15e","observation_id":"d66de666-85d2-4741-aa5e-0688d4927a54","resolution":{"observed_at":"2026-08-15T14:18:55.172611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.749959Z","title":"2017 , eprint =","venue":null,"work_id":"08e44cb9-4c24-4213-976c-21f15e5898f1","year":2017},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.178412Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:da6ed82059b95cc8b2161bc64f4048f576b0932a4fc9336dd4069dfc80186615","observation_id":"18c22492-cdff-4ca7-b232-67b1b859bb6a","resolution":{"observed_at":"2026-08-15T14:18:56.755015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.733248Z","title":"Transformer Circuits Thread , year=","venue":null,"work_id":"eac9c5ce-4484-4b6d-9a68-fd7be7696125","year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.185317Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:f1acf59738b87c7473159c482677d3880595e18acdba89dd9baf240a609eafc4","observation_id":"9a64f036-543c-44ba-b358-262a0a302c1c","resolution":{"observed_at":"2026-08-15T14:18:56.738513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-08-11T14:17:58.581691Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-15T14:18:55.191496Z","title":"arXiv preprint arXiv:2602.03117 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.191496Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:b04777e32c63af53b9802b2de58c7ad6f9218fbd27329b4f8625db6f47a1fbaa","observation_id":"0ccef5b7-c3b1-4a0d-b4cd-05a50b5b92d4","resolution":{"observed_at":"2026-08-15T14:18:55.191496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.716563Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":"d67e68b5-cc1e-477b-b8dd-692f679d0067","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.197675Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:aa5c713aa4ed89f5456b10628065b33b52f8cfd9a109c72cdced2b9f0fcda6ed","observation_id":"517a7dcf-f7fc-48aa-bf1b-a3300a343696","resolution":{"observed_at":"2026-08-15T14:18:56.721856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.698546Z","title":"IEEE Access , volume=","venue":null,"work_id":"2010f339-86fc-4cf6-b984-633dc194a12c","year":2019},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.203958Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:505f456fa19131bfee5ac16fdfa8c0272948b815fb7c09ca3972cb4860ee9943","observation_id":"f60774df-c485-4603-b9df-ce7235f59fd1","resolution":{"observed_at":"2026-08-15T14:18:56.704522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.679863Z","title":null,"venue":null,"work_id":"9e06bad6-2ea7-4239-a789-3ce4add71bf7","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.209857Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:6534cd40261169a4c2a9ef2abc078d192af50b4d6293a71ae163650d50b67322","observation_id":"2435eeb4-16ce-417e-bc31-242fa9fd4082","resolution":{"observed_at":"2026-08-15T14:18:56.685797Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.215554Z","title":"Proceedings of the National Academy of Sciences , volume =","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.215554Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:3b225d617808c9012727906fe1bf51e3a3f0146cef88afc981c4d0c4f29ca7db","observation_id":"39dc13c3-6683-42b4-9838-412888301a35","resolution":{"observed_at":"2026-08-15T14:18:55.215554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.647285Z","title":"Research in Attacks, Intrusions, and Defenses , series =","venue":null,"work_id":"56c048d4-4c35-4d5e-bcaa-21bb7fa81710","year":2018},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.221970Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:a4f56a1dc0c955deade2dca7abd236345b5a50cdc9071283b5c4839cdb5aec40","observation_id":"ff5e41df-4c1f-41b8-a56b-466ecfde72f5","resolution":{"observed_at":"2026-08-15T14:18:56.653711Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.628477Z","title":"2024 , doi =","venue":null,"work_id":"115cf61a-cb4b-4acc-8eb7-81140e264a16","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.228711Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:41478acca89a6804e8fe3a8e36c2312a30eafe6bd2da1ca0e03b3f53fc8cd428","observation_id":"7cdef724-e464-4140-8e73-a122ec42b91e","resolution":{"observed_at":"2026-08-15T14:18:56.633976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.610567Z","title":"Psychology of Learning and Motivation , volume =","venue":null,"work_id":"b4fc6076-0fee-42fd-b088-b391aeb74b3a","year":1989},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.236214Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:6a1a1c59ffcea732d0a07bfdc3549e446388b7b38b6dabfffa5c74e1c7c97d40","observation_id":"d0d212f3-8ddb-421b-a0de-6c930ce1cce8","resolution":{"observed_at":"2026-08-15T14:18:56.616329Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-08-15T14:18:55.241792Z","title":"2505.09388 , archivePrefix =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.241792Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:99bd260d3d50cdc097b5483515edbeeddf8ac02e5e2f91ab6fa71303b25041c7","observation_id":"db3dd63b-edb0-4d2e-9f7a-e93bccd45c39","resolution":{"observed_at":"2026-08-15T14:18:55.241792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.592392Z","title":"Proceedings of the 40th International Conference on Machine Learning , series =","venue":null,"work_id":"998fc8fd-d7f3-4b9d-b5bc-0e4889986bde","year":2023},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.248727Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:81db7d1b33a3b54c3ec9398a451edace89cdf8577c11c7183a188969d2ae1c19","observation_id":"b253d72c-77a7-4ed8-958a-6cd7ef2723f5","resolution":{"observed_at":"2026-08-15T14:18:56.598708Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.574109Z","title":"Watch Out for Your Agents! Investigating Backdoor Threats to","venue":null,"work_id":"86a1ce58-3921-487c-bbf0-cd63b769ce64","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.254675Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:99878c3b2c1785a17c1db9c88cce4fff600fc88636461070e566d816e1101f5d","observation_id":"6970bf13-0858-4c79-bda1-11b4d9f79ffe","resolution":{"observed_at":"2026-08-15T14:18:56.580061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.555173Z","title":"Transactions of the Association for Computational Linguistics , volume =","venue":null,"work_id":"6c936702-f3b4-4f68-a948-0b2a3a74577b","year":2023},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.260629Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:1f562c8765bdbd78e8d8496e841c69ac5eb73704e8aa98a93f2dacf0236c6db0","observation_id":"ee1df0dd-b492-4864-a34b-79d2b3d87eaf","resolution":{"observed_at":"2026-08-15T14:18:56.561201Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.266018Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.266018Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:4b083e40d68b8f04ab1c3f0c0ca934d7be01c2b711c9e0b7a2c5630cdafa4af5","observation_id":"c611f68d-b92c-47bd-9f26-1ec21ae5d826","resolution":{"observed_at":"2026-08-15T14:18:55.266018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.522159Z","title":"Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics , address =","venue":null,"work_id":"36a69b6b-8e69-4a60-837a-66de7aabb6ba","year":2020},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.272366Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:4c10da088d234cf3f14b20aa9cc441add3f6efef8c2c95be640758b3df376ef0","observation_id":"7f3f144f-1fe5-491f-a591-d39f29d8eba3","resolution":{"observed_at":"2026-08-15T14:18:56.527517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.503806Z","title":null,"venue":null,"work_id":"d12147e7-834d-4223-b987-06e41596a712","year":2021},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.280045Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:64df9c58f870cdde6dce9f25a2eaaba523754eb9025488657ec82514e3bc2ef3","observation_id":"3c8a8c33-fc53-4108-aeee-a527bda97df3","resolution":{"observed_at":"2026-08-15T14:18:56.509041Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.484315Z","title":"Advances in Neural Information Processing Systems , volume =","venue":null,"work_id":"b1b4dd6e-8cd0-47ff-afd8-5f76805dba35","year":2023},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.287271Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:9b4bf72b95e29108b28c3d13decebd9caac20eb7b1ca9e6da0aa18e1c54946a1","observation_id":"bb5913f4-01de-4df8-b96f-8fd15fa4b944","resolution":{"observed_at":"2026-08-15T14:18:56.490117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.465567Z","title":"2024 , doi =","venue":null,"work_id":"8bc0eff3-b6f2-44c5-9c25-6a7db2f40c56","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.292927Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:4b4770922051c79556e49df0536308be48cbcd20bcac33e44881ea66e1b94096","observation_id":"51aa7f37-9f83-4000-92c6-ef75d40c95bc","resolution":{"observed_at":"2026-08-15T14:18:56.472246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.448355Z","title":"2024 , doi =","venue":null,"work_id":"d32bb78e-ccaa-4ac7-a0f6-5e96f7a47ea4","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.298625Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:6f513d20172406beb9eac342a29b138097c806c0e1ce45292642c78eda5f135e","observation_id":"d74fbbd7-fee4-4c89-b2e5-fcb6dbf33953","resolution":{"observed_at":"2026-08-15T14:18:56.453634Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.431839Z","title":"2024 , doi =","venue":null,"work_id":"421e5eb0-0310-469b-9a52-53318a2f2c4a","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.303912Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:55749f76ba43b048d043e8b78d89bfe9a95b5ae9e90b5fff709a97f3d231fa70","observation_id":"4463eb13-c118-4ede-acc9-906e7a817499","resolution":{"observed_at":"2026-08-15T14:18:56.437048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.414895Z","title":"2025 , url =","venue":null,"work_id":"eff88a70-69ec-46cd-bd3f-ac3a09f28ac3","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.309105Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:f644e01d0910c91c45b40ba9027043c5e1ce53f2d82d018cc038fd150344d6ef","observation_id":"d7e31dd1-83af-4e76-b07d-4e1af04c1519","resolution":{"observed_at":"2026-08-15T14:18:56.420819Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.398437Z","title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers) , address =","venue":null,"work_id":"7ea57bd3-4412-4260-804f-e69b0534d475","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.314328Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:369681bd068e7e19c1c1bd58b8a3b749095a49fe847e1e0132e99baae33f7698","observation_id":"89a9a4b1-9f2c-49fc-9873-04489c0a09e9","resolution":{"observed_at":"2026-08-15T14:18:56.403816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.382099Z","title":"Proceedings of the AAAI Conference on Artificial Intelligence , volume =","venue":null,"work_id":"38dcce46-2097-48a7-aca0-df9ec305637b","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.320896Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:ef38f1fa742eedb2c200c5a746ba492f13d0dfddab0b52d53d3e20210bddfa45","observation_id":"84217e09-0ce8-4dc4-ad96-89be9a3ebac1","resolution":{"observed_at":"2026-08-15T14:18:56.387569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.363264Z","title":"2025 , doi =","venue":null,"work_id":"ddea10bf-a189-494a-aa4d-48bb6aaeb739","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.326891Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:f96dc0a128daa376f9e8d5884643e4e1714f4ffd6f28056ffc715288d4c914f5","observation_id":"6bfbf9b9-f8c7-44d1-ab66-fad9af1490cb","resolution":{"observed_at":"2026-08-15T14:18:56.369770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.346247Z","title":"2024 , url =","venue":null,"work_id":"f18b4c41-91bd-42e6-81be-9c73d3c3071e","year":2024},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.332708Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:fc1fd5f056c2227002d46d47529290caa51266a700bed7edf5b3f838fd895d25","observation_id":"f0f81c50-1990-44fc-a00f-90820cf011e9","resolution":{"observed_at":"2026-08-15T14:18:56.351357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.325798Z","title":"Persistent Backdoor Attacks Under Continual Fine-Tuning of","venue":null,"work_id":"2eaf4869-8287-4bbe-b573-f5ceec084754","year":2026},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.337918Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:fba535c72e2444b883108f8739d61add3f6ec7ec021d10b9cf273b05f85971cb","observation_id":"c5d52300-ff45-48df-ba86-1d00102c61f6","resolution":{"observed_at":"2026-08-15T14:18:56.333204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.05432","last_updated":"2026-04-07T04:58:01Z","snapshot_observed_at":"2026-08-16T20:40:46.225070Z","submitted_at":"2026-04-07T04:58:01Z","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.05432","snapshot_observed_at":"2026-08-15T14:18:55.343264Z","title":"arXiv preprint arXiv:2604.05432 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.343264Z"},"links":{"cited_paper":"/paper/2604.05432","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:0a981e9171c9d976612e5a09d62b70c18025f5fa2ff3178e3c4d5c9e3169501f","observation_id":"8bbcef4e-1ba7-4b20-8710-c6f924ee5a6d","resolution":{"observed_at":"2026-08-15T14:18:55.343264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09067","last_updated":"2022-12-18T11:30:59Z","snapshot_observed_at":"2026-08-16T16:07:52.186532Z","submitted_at":"2022-12-18T11:30:59Z","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09067","snapshot_observed_at":"2026-08-15T14:18:55.349625Z","title":"arXiv preprint arXiv:2212.09067 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.349625Z"},"links":{"cited_paper":"/paper/2212.09067","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:80e44858616513cf733c07c0e88e623292eb7feaa98ab4e19f63ba14379d62c1","observation_id":"02dc67f7-d13d-4d88-b47c-60aa6570c8c8","resolution":{"observed_at":"2026-08-15T14:18:55.349625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.298252Z","title":"Proceedings of the IEEE/CVF International Conference on Computer Vision (ICCV) , pages =","venue":null,"work_id":"37933903-b593-4b02-968f-5d66ac2e2081","year":2023},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.354694Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:f8a97147c68bc65f870ea225849c94025063542de2dc5b7f7d1fc9bf68f6b77b","observation_id":"f16563be-68f4-4b49-8fd3-efaa8ff1f479","resolution":{"observed_at":"2026-08-15T14:18:56.306771Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.07778","last_updated":"2024-08-21T23:07:49Z","snapshot_observed_at":"2026-08-16T13:43:57.968095Z","submitted_at":"2024-06-12T00:01:32Z","title":"A Study of Backdoors in Instruction Fine-tuned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.07778","snapshot_observed_at":"2026-08-15T14:18:55.359732Z","title":"arXiv preprint arXiv:2406.07778 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.359732Z"},"links":{"cited_paper":"/paper/2406.07778","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:909cd4d294679665dbf31634e19b375cf839facaf0af43456220ec4591754741","observation_id":"350c0eb1-bc12-46bd-a0ba-cf1840ffa0af","resolution":{"observed_at":"2026-08-15T14:18:55.359732Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.276240Z","title":"Transactions on Machine Learning Research , year =","venue":null,"work_id":"2211370f-6a03-471d-8e01-a8ae9a2b013a","year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.365054Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:ddf71ce0a6e3651292cfd495b464fe192474d105ef0fdf8ea5d19fa39acb2747","observation_id":"99fddae1-3fb4-41df-a82e-5a22d6bf30fa","resolution":{"observed_at":"2026-08-15T14:18:56.283523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.255225Z","title":"A Survey on Backdoor Threats in Large Language Models (","venue":null,"work_id":"711991b6-e6e6-4b0d-996d-0cb4ef4340b3","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.370487Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:b689c7bcbb70f8dc004f9900b046aac85c7089a242cc14d3ed126b46e4a84218","observation_id":"8a2bd4d7-dda4-4a56-9ce8-9bd1bc1aed4b","resolution":{"observed_at":"2026-08-15T14:18:56.261711Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.236193Z","title":"Findings of the Association for Computational Linguistics: EMNLP 2022 , pages =","venue":null,"work_id":"bfe796d5-3aec-478e-ae0a-c28409891466","year":2022},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.376377Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:d3dc7fbeb0c3c782525adbb453bfe14cf3a9b01f5639b22b3663d7f46efc3313","observation_id":"37aaa9d8-5719-4514-aa24-90cc967d0daa","resolution":{"observed_at":"2026-08-15T14:18:56.242031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.217783Z","title":"2025 , eprint =","venue":null,"work_id":"40e9e2c4-6dc6-42c2-a060-b19a221ec74c","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.382121Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:f39cf640feae97555227749a3dab3555c90b8a1c7d7209359826d78991bf6b97","observation_id":"3d63ae90-4ed2-4c0a-986a-069a3e5e9668","resolution":{"observed_at":"2026-08-15T14:18:56.223326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.199061Z","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain , year =","venue":null,"work_id":"cd4e74c2-5841-40e9-a67f-1bb55a7fc940","year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.388135Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:5bdf76e761aff556f16e5be99d909e4890ed793a9010e7dced605effef4ace44","observation_id":"60ad3657-911f-4d84-b6f8-2fa2a3136370","resolution":{"observed_at":"2026-08-15T14:18:56.204832Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15219","last_updated":"2025-07-21T03:41:44Z","snapshot_observed_at":"2026-08-06T15:35:31.690602Z","submitted_at":"2025-07-21T03:41:44Z","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15219","snapshot_observed_at":"2026-08-15T14:18:55.394338Z","title":"arXiv preprint arXiv:2507.15219 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.394338Z"},"links":{"cited_paper":"/paper/2507.15219","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:23d7f8645553f2473f28cb19d37e0ff04b8d56767e704c74db821e51e6ed4e92","observation_id":"8754f686-3425-43bd-865d-a46c47f389f0","resolution":{"observed_at":"2026-08-15T14:18:55.394338Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-13T15:19:02.871791Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-15T14:18:55.399685Z","title":"arXiv preprint arXiv:2503.18813 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.399685Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:abd8390d73f31431600e6723c5ca1b83aa33276e508fb76462c3fb219949a2e1","observation_id":"d93f616b-4e7b-466b-abbc-d6c6ae909a54","resolution":{"observed_at":"2026-08-15T14:18:55.399685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.405519Z","title":"arXiv preprint arXiv:2510.05244 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.405519Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:43ecce9aa83441bc46246ab9a63c1c95dfc812ddd261885de58cfaaa20a6b213","observation_id":"549108e1-8d8f-4b8f-bcfe-b21f3aa810ef","resolution":{"observed_at":"2026-08-15T14:18:55.405519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.410782Z","title":"Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics , year =","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.410782Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:0c3a9d8501ca9b2e9b295b2182874017ef4f1248ea85cb36062b34f427a691cb","observation_id":"f8df3ec9-4eca-4c58-856b-89b5e4a0135f","resolution":{"observed_at":"2026-08-15T14:18:55.410782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:55.416301Z","title":"Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.416301Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:5cee8920486d767fdd1146882f222480256a30d538475d6916ce6541098cbb87","observation_id":"03d8e61e-ddb3-4ccc-9b4c-78f13fe83f31","resolution":{"observed_at":"2026-08-15T14:18:55.416301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.179863Z","title":"2025 , journal =","venue":null,"work_id":"7595da70-771c-4823-ba23-1f898dabfd37","year":2025},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.421586Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:af462da4aa0c53fc841d66763af1b12b2f50937b5c3fb1b39305b9cd1dac93e6","observation_id":"d69e57a0-e80b-489b-a07b-7500c98014fb","resolution":{"observed_at":"2026-08-15T14:18:56.185082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T14:18:56.161101Z","title":"2026 , journal =","venue":null,"work_id":"0f1d3222-d331-40e7-901d-c49636156e75","year":2026},"citing_paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-08-15T14:18:55.426956Z"},"links":{"citing_paper":"/paper/2608.11295"},"observation_digest":"sha256:07c69f2cb838658f04cfca873cb26a3d134521a023e10088e8f0f23360c4dffa","observation_id":"8ebaca52-0963-4734-9268-d1b15711dd6c","resolution":{"observed_at":"2026-08-15T14:18:56.167520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.11295","last_updated":"2026-08-11T17:54:26Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T14:02:19.234070Z","submitted_at":"2026-08-11T17:54:26Z","title":"Backdoor Decontamination Dynamics in LLM Agents"},"reference_resolution":{"displayed":67,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":32,"verified_exact":2,"verified_fuzzy":33},"total_outbound_references":67},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 67 of 67 outbound references and 0 inbound Pith citation observations for arXiv:2608.11295."}