{"as_of":"2026-08-16T14:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0c6952a1008a495e50767241f02b760c0a235019e0c361a224ec7ebfba59002e","coverage":[{"denominator":76,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":76,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T19:23:24.829197Z","state":"measured"},{"denominator":76,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":76,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.12977/citation-record","integrity":"/paper/2608.12977/integrity","json":"/paper/2608.12977/citation-record.json","paper":"/paper/2608.12977"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.897855Z","title":"Re- act: Synergizing reasoning and acting in language models","venue":null,"work_id":"b769bdeb-aeac-491f-b20a-ff22edbb611e","year":2023},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.779389Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:c33e9038ce8a96177f5973b96010015bea462f0a0bd8cb98338cf95890e4a308","observation_id":"e2e316f4-2144-4c23-afec-cc92c79d6ba1","resolution":{"observed_at":"2026-08-15T19:23:27.903094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.877011Z","title":"Toolformer: Language models can teach them- selves to use tools","venue":null,"work_id":"aa5c23ca-0dcc-4662-9211-b994961e0f28","year":2023},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.809565Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:d09d2d9b79c302d424ac28b8e69c1761013d2576c0235b0a586c85b5575d1e67","observation_id":"4c57a5ac-0bf2-4b60-a03c-59d17129018d","resolution":{"observed_at":"2026-08-15T19:23:27.885166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.676575Z","title":"Patil, Tianjun Zhang, Xin Wang, and Joseph E","venue":null,"work_id":"d18ec8dd-6ed9-46f1-aee3-15cf72a94544","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.827603Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:d4ec098405c76a2707ce0eaa2681b0aa4d18106d52efa0be05872a50d8af1cdf","observation_id":"20dec6e3-f9de-4ca6-9c3f-d801489ec2c7","resolution":{"observed_at":"2026-08-15T19:23:27.761473Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.658130Z","title":"Jimenez, John Yang, Alexander Wettig, Shunyu Yao, Kexin Pei, Ofir Press, and Karthik Narasimhan","venue":null,"work_id":"e3249fab-70c6-4019-ae4b-e98120c025e0","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.833925Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:8d91f9d3cd7d9cb403872f11c1b295ab8e225f1ffd6819939a2062c6769047fc","observation_id":"91ad0cc3-65fa-4670-9a7d-1c7b84b44e55","resolution":{"observed_at":"2026-08-15T19:23:27.664230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-08-14T11:14:55.351653Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-08-15T19:23:22.839499Z","title":"Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.839499Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:70b3563a3a29ac14fb0abb2e5a747b3fc43e716bd3135abcb433e2c0e03ac09c","observation_id":"6cb4ec6a-4bc6-45b2-a9d0-62b94857b1a5","resolution":{"observed_at":"2026-08-15T19:23:22.839499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.639993Z","title":"Maddison, and Tatsunori Hashimoto","venue":null,"work_id":"02411dca-3da4-4caf-9745-8aaa493a8058","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.845918Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:bc87b7d96d4bdbc7d8cafb7d0110862e0af7dc31f8a790446ff16aa49ccd102b","observation_id":"91ce4f18-1652-4079-aa93-2906529cb8c2","resolution":{"observed_at":"2026-08-15T19:23:27.645389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.527243Z","title":"Agentharm: A benchmark for measuring harmfulness of llm agents","venue":null,"work_id":"711bd46e-d33c-4c60-895f-2f7683831d52","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.851748Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:655b6a075c142620e3ed479c0dc7e648ca9792bd500d3e9f72bf0f0e0e0fd7ed","observation_id":"e87ef818-3caf-481f-bf41-a2eefae9e1e1","resolution":{"observed_at":"2026-08-15T19:23:27.595334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.512264Z","title":"Agent security bench (asb): Formalizing and benchmarking attacks and defenses in llm-based agents","venue":null,"work_id":"2f3eae6c-6318-44c3-8f7d-ce2b5e6e124f","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.857396Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:a140486e88357bd0612cb241068ae4cc94804ebbebdc73ffb97895f440a20c17","observation_id":"adfe4f82-4816-4ce0-a97a-8123905ddf3a","resolution":{"observed_at":"2026-08-15T19:23:27.516920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.495816Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents","venue":null,"work_id":"5af2e03e-cbed-4f53-922a-a5c420dcf6e9","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.863808Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:07828b6c72a4b51ac20486e0515691ddfee70332134c74d6ee90ba8f436785f3","observation_id":"f523a6af-df5d-48db-a303-04e8377cf094","resolution":{"observed_at":"2026-08-15T19:23:27.501022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16682","last_updated":"2024-12-21T16:17:48Z","snapshot_observed_at":"2026-08-12T03:14:31.288757Z","submitted_at":"2024-12-21T16:17:48Z","title":"The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16682","snapshot_observed_at":"2026-08-15T19:23:22.940989Z","title":"The task shield: Enforcing task alignment to defend against indirect prompt injection in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:22.940989Z"},"links":{"cited_paper":"/paper/2412.16682","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:08edd4d9773727e72fb6c10d87016ac2577a1dd7d16841e662b831a8d5148be9","observation_id":"a1fca321-2cae-4f55-980e-5d4605907cd2","resolution":{"observed_at":"2026-08-15T19:23:22.940989Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06363","last_updated":"2024-09-25T19:48:39Z","snapshot_observed_at":"2026-08-14T19:45:16.313175Z","submitted_at":"2024-02-09T12:15:51Z","title":"StruQ: Defending Against Prompt Injection with Structured Queries","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06363","snapshot_observed_at":"2026-08-15T19:23:23.041441Z","title":"Struq: Defending against prompt injection with structured queries","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.041441Z"},"links":{"cited_paper":"/paper/2402.06363","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:c436e5e293ecbaf9750f038a669e359749bd42c4295dd30dc817039f9835cba8","observation_id":"ffd2e8c0-7c86-4a9a-a4d2-fcba4a34b5c3","resolution":{"observed_at":"2026-08-15T19:23:23.041441Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05451","last_updated":"2025-07-03T05:45:41Z","snapshot_observed_at":"2026-08-16T13:11:45.940997Z","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05451","snapshot_observed_at":"2026-08-15T19:23:23.073914Z","title":"Secalign: Defending against prompt injection with preference optimization","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.073914Z"},"links":{"cited_paper":"/paper/2410.05451","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:44762a069fcead8e21b2c4073868b9f19912485721ec324274961a249b9c4404","observation_id":"a59a9ec2-571e-4052-9299-c54acff204a3","resolution":{"observed_at":"2026-08-15T19:23:23.073914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:23.084596Z","title":"Toolsafety: A comprehensive dataset for enhancing safety in llm- based agent tool invocations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.084596Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:1a58bca5ac10077079f0504d84d10779486cee68f8b7a123ea8ca494fde1916d","observation_id":"ae45350b-9e22-42bf-9513-a93d98ebe828","resolution":{"observed_at":"2026-08-15T19:23:23.084596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.08270","last_updated":"2025-07-11T02:34:16Z","snapshot_observed_at":"2026-08-07T01:31:51.955348Z","submitted_at":"2025-07-11T02:34:16Z","title":"Agent Safety Alignment via Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.08270","snapshot_observed_at":"2026-08-15T19:23:23.093260Z","title":"Agent safety alignment via reinforcement learning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.093260Z"},"links":{"cited_paper":"/paper/2507.08270","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:0ed634ead9a79ac9a086506228a02545e9129a9c85914bfc341ccea713257dc1","observation_id":"9fde75e9-3488-4d78-9538-2781d2be5cef","resolution":{"observed_at":"2026-08-15T19:23:23.093260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:23.102333Z","title":"Adversarial reinforcement learning for large language model agent safety","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.102333Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:cae371dc6541dc9bdc4684d58161230ee7b954b655945f0803e2e71d9b89e023","observation_id":"c0c9207c-d58e-4367-87ab-862bec6881c3","resolution":{"observed_at":"2026-08-15T19:23:23.102333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11882","last_updated":"2026-05-12T09:56:28Z","snapshot_observed_at":"2026-08-11T20:30:03.018548Z","submitted_at":"2026-05-12T09:56:28Z","title":"On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11882","snapshot_observed_at":"2026-08-15T19:23:23.109851Z","title":"On-policy self- evolution via failure trajectories for agentic safety alignment","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.109851Z"},"links":{"cited_paper":"/paper/2605.11882","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:865be0c51bc3fd2f39415d14d38833aca4611f7a9a26e1a6ecda027380fcd382","observation_id":"a70265d2-98db-4f26-901d-ca99324933e7","resolution":{"observed_at":"2026-08-15T19:23:23.109851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:23.116195Z","title":"The attack and defense landscape of agentic ai: A comprehensive survey","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.116195Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:048c632f6d895f967a18e3e43c9feef97f8e08ce27ec03d9d48683c30a442a62","observation_id":"f1bebccd-604f-4c28-be75-c8df45d06f1f","resolution":{"observed_at":"2026-08-15T19:23:23.116195Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.11790","last_updated":"2026-05-11T16:09:04Z","snapshot_observed_at":"2026-08-12T15:01:26.208104Z","submitted_at":"2026-04-13T17:55:11Z","title":"ClawGuard: A Runtime Security Framework for Tool-Augmented LLM Agents Against Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.11790","snapshot_observed_at":"2026-08-15T19:23:23.121097Z","title":"Clawguard: A runtime security framework for tool- augmented llm agents against indirect prompt in- jection","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.121097Z"},"links":{"cited_paper":"/paper/2604.11790","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:f60f169495424f8fbc8f7f3bb30122540679ced7709a6c0640aaa34ff9940cdb","observation_id":"25c934bb-7f40-4f8e-b0b0-de0765f732f2","resolution":{"observed_at":"2026-08-15T19:23:23.121097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:23.126307Z","title":"Openclaw prism: A zero-fork, defense- in-depth runtime security layer for tool-augmented llm agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.126307Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:9609b549f066ef0aaa4b58b3083e956da3d5c8f6641a7861433ce7fcc68817dd","observation_id":"3d68d17f-917a-4be1-8d8a-d2caa9fb9835","resolution":{"observed_at":"2026-08-15T19:23:23.126307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.327070Z","title":"Defending against indirect prompt injection attacks with spotlighting","venue":null,"work_id":"bf55eb90-d371-4879-9788-83ba2525cfba","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.131485Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:96937d7e39e67d4d9d50f2e7678730169629e462f02cb34c2baec8682e56d1b0","observation_id":"788081a5-682c-4c97-8993-e97c5f35472c","resolution":{"observed_at":"2026-08-15T19:23:27.409925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.311970Z","title":"GuardAgent: Safeguard LLM agents via knowledge-enabled reasoning","venue":null,"work_id":"f8feeb03-bce1-4e73-aa16-cfb3afa376d5","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.168862Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:e0b1593e4e19393a257ea7ba33803e813bac18e2af7fe6caaa3684d667200636","observation_id":"02d939c6-06ca-4837-8d74-7520f57a7596","resolution":{"observed_at":"2026-08-15T19:23:27.316544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.295360Z","title":"IsolateGPT: An ex- ecution isolation architecture for LLM-based agen- tic systems","venue":null,"work_id":"3ecfd071-be4f-4303-a4d5-409bcf42d914","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.274452Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:534e4180e803f8ad70dd70d12f123ab7c9a40cf8ec384ada20834ab64cb19f27","observation_id":"f67b2e00-887c-4b7f-b6c8-7a20348db829","resolution":{"observed_at":"2026-08-15T19:23:27.301958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-08-12T23:26:44.716922Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-15T19:23:23.325322Z","title":"10 Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM AgentsA PREPRINT Progent: Securing ai agents with privilege control","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.325322Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:94751b3fc87dec0323ce466a259818db322c55757427535a40d069bb4c2a79c6","observation_id":"1c963db4-b9da-4cf5-85d0-383767a63f49","resolution":{"observed_at":"2026-08-15T19:23:23.325322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:23.334717Z","title":"Defending against indirect prompt injection by instruction detection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.334717Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:3db2d27ca0bdc52a0ecc03457dfb65744389cf845a248092829617de5f6202d0","observation_id":"041b15f2-744b-4862-8781-4a6e5146e6d9","resolution":{"observed_at":"2026-08-15T19:23:23.334717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-16T12:54:47.529956Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-08-15T19:23:23.340515Z","title":"Adaptive attacks break defenses against indirect prompt injection attacks on llm agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.340515Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:37ee60bf295dbb3646307166d085c35ae237a0536c83902f944d6550d7fb7344","observation_id":"e47d4d2c-b630-443a-8f7b-8c3713f333d4","resolution":{"observed_at":"2026-08-15T19:23:23.340515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.10484","last_updated":"2026-06-09T06:55:37Z","snapshot_observed_at":"2026-08-14T07:53:57.222567Z","submitted_at":"2026-06-09T06:55:37Z","title":"AgentCanary: A Security Evaluation Framework for Autonomous AI Agents in Real Executable Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.10484","snapshot_observed_at":"2026-08-15T19:23:23.346372Z","title":"AgentCanary: A secu- rity evaluation framework for autonomous ai agents in real executable environments","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.346372Z"},"links":{"cited_paper":"/paper/2606.10484","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:ee3fedbc6f21a2a7160e7b438dc4b49ebf0dddaef07bb9d80ec0af5e442e12df","observation_id":"5cf22db1-1859-4bb3-a4a3-2882e2601706","resolution":{"observed_at":"2026-08-15T19:23:23.346372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.208834Z","title":"DRIFT: Dy- namic rule-based defense with injection isolation for securing LLM agents","venue":null,"work_id":"275de21b-7ac3-4df8-bb56-798b090eabf5","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.456798Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:55ec0c45ffb150d293712352525488c00db1d93d1fc6a4c0ba2b0b213d8d1991","observation_id":"e2036143-2050-4bbf-b932-21ab6d608389","resolution":{"observed_at":"2026-08-15T19:23:27.265290Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05175","last_updated":"2024-09-18T20:53:06Z","snapshot_observed_at":"2026-08-16T13:54:17.893175Z","submitted_at":"2024-05-08T16:12:45Z","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05175","snapshot_observed_at":"2026-08-15T19:23:23.594376Z","title":"Airgapagent: Protect- ing privacy-conscious conversational agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.594376Z"},"links":{"cited_paper":"/paper/2405.05175","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:adfbc29012a9b258e66dec99e138a0321c75026aeefeb3de6a644649e61fa4de","observation_id":"bc17199c-697b-4aa9-b64d-fc1f8e5a6e8b","resolution":{"observed_at":"2026-08-15T19:23:23.594376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02947","last_updated":"2026-04-03T10:29:31Z","snapshot_observed_at":"2026-07-29T16:09:43.498926Z","submitted_at":"2026-04-03T10:29:31Z","title":"AgentHazard: A Benchmark for Evaluating Harmful Behavior in Computer-Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02947","snapshot_observed_at":"2026-08-15T19:23:23.602653Z","title":"AgentHazard: A benchmark for evaluating harmful behavior in computer-use agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.602653Z"},"links":{"cited_paper":"/paper/2604.02947","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:a78c3dcf7d2b0a530c2a5d5b33c4e232a6c9cc7e4752ca31d7844755977c7a17","observation_id":"77ab97fe-e76d-4aab-a497-1fc40c161919","resolution":{"observed_at":"2026-08-15T19:23:23.602653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.192552Z","title":"Pinchbench: Real-world benchmarks for ai agents","venue":null,"work_id":"82ad0224-6a5b-4221-be4a-c879d1ed2ce8","year":null},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.608832Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:944f0a33777d680c789a373e53060b88606b90b4b718f26a65273945edc6892e","observation_id":"c2bcfba3-4a04-40ff-a61d-152dc28fcb7f","resolution":{"observed_at":"2026-08-15T19:23:27.197958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.156891Z","title":"SecureClaw: An owasp-aligned secu- rity plugin and skill for openclaw agents","venue":null,"work_id":"7e49bac3-47db-43fe-bfd7-98916a5a64f5","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.695158Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:10bc8c2fe76a179d5e76c99e716c7796f61844db8c3a6d12023e6ab2168b0b37","observation_id":"ff68e088-c2cc-4d7a-a46c-6ddc69981516","resolution":{"observed_at":"2026-08-15T19:23:27.162604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:23.800011Z","title":"ClawKeeper: Comprehensive safety protection for openclaw agents through skills, plugins, and watch- ers","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.800011Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:bd9488146fd43f80af50b41b4b715cae783e379d3ccdc43ca29980c7b7b30132","observation_id":"761e7900-d747-4e50-8a06-7d234c852e3f","resolution":{"observed_at":"2026-08-15T19:23:23.800011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.074105Z","title":"OpenClaw Shield: A defense-in-depth se- curity plugin for openclaw agents","venue":null,"work_id":"e8a5770a-4bee-48b0-9826-6d4d8d18ad89","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.807622Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:bf079049124a6677db2bd19194397aecef236605e64f48c17750b6282e11b4a4","observation_id":"e52dc3c4-54d2-4be7-8123-07f836fbd041","resolution":{"observed_at":"2026-08-15T19:23:27.111567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.021046Z","title":"DeepSeek-V4 technical report","venue":null,"work_id":"a9d89f70-13a6-4abd-9db6-25f88194c13b","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.813534Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:e43b68a43954ab33491c1dff694c9d3260d2ab6903b07260ca042bc1db06af57","observation_id":"3240cbff-d4e3-4bfb-b0a6-d67750e1a739","resolution":{"observed_at":"2026-08-15T19:23:27.025868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.005356Z","title":"GLM-5 technical report","venue":null,"work_id":"e698b3d9-66c9-4442-a2c8-a0f704873ebe","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.934613Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:08b24bb481e3f61ac54a5a4811023c3227d59fe97bafd51958d6993e245143bc","observation_id":"f9b18c3c-7b14-4599-88ed-922b0a1ffd3e","resolution":{"observed_at":"2026-08-15T19:23:27.010087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.988438Z","title":"GLM-5.2 technical report","venue":null,"work_id":"58804cf4-3205-4f64-9c2e-a97aa263a808","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.022092Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:e0903e5afd9a0788d8245f0cf196c56149774589790e4db95e518030ea1ffda1","observation_id":"f1ceaf12-beaa-49b5-8fb7-fa74e39ef638","resolution":{"observed_at":"2026-08-15T19:23:26.994478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.972618Z","title":"Claude Opus 4.6","venue":null,"work_id":"cf9f4723-7533-4ea7-9ef8-ffdc671f2485","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.041037Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:9ffbec2ecbecbfa569905401b424b82e30ff9e541ef8512adfdb5935ed4ad076","observation_id":"447035be-0980-422d-9931-b72792a5f624","resolution":{"observed_at":"2026-08-15T19:23:26.977576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.873522Z","title":"Qwen3.7-Max","venue":null,"work_id":"ac7fbeed-cfe7-4b30-9dd4-563c54e582da","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.045620Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:2b07fa28d825821b17168678a88b720e5e6f0b515e8abc51e21ce83a7e411c0b","observation_id":"78dd1f9f-9cc3-4a62-86d2-0193be1f9f7d","resolution":{"observed_at":"2026-08-15T19:23:26.908268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.831888Z","title":"GPT-5.5 system card","venue":null,"work_id":"efeeb780-50c2-47af-bfab-4666a8db1600","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.050598Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:6a87396e2ecc6ec4ef7cd492b0ef6e6e83963595c559a7f9376ccb18b0c08b6f","observation_id":"d494b7ff-115f-410e-9261-44d2a9a3680a","resolution":{"observed_at":"2026-08-15T19:23:26.838053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-08-12T09:06:50.363435Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-08-15T19:23:24.055925Z","title":"Zico Kolter, and Matt Fredrik- son","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.055925Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:8fbdac8c54585534d353728d84550ef7f27e55e52074b9ac012255a40332ccd4","observation_id":"a1a854b0-58b4-4352-976e-77323ddf3098","resolution":{"observed_at":"2026-08-15T19:23:24.055925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.815745Z","title":"Autodan: Generating stealthy jailbreak prompts on aligned large language models","venue":null,"work_id":"a8c8340a-c7e5-4eee-8782-3e69e36b471d","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.062496Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:4025fd549160c779c855e69941fdf57f3f5bd264197040785c8cf731abf454da","observation_id":"b0acf4b4-74df-497a-a4ed-f0b9376cf8f0","resolution":{"observed_at":"2026-08-15T19:23:26.820947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-08-16T13:08:51.920120Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-15T19:23:24.068214Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.068214Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:af0e2bd707ffad8b59c54295e94484c44ba75ab2d2a58c2379d26e14fcb03635","observation_id":"d23c3a7b-dd63-4e58-a3be-2d717b5776aa","resolution":{"observed_at":"2026-08-15T19:23:24.068214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.704405Z","title":"Tree of attacks: Jail- breaking black-box llms automatically","venue":null,"work_id":"3c4142d9-1b00-492f-a306-f0db72a79c72","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.074547Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:d2b0bcaff8e95b8f05395c9b79bc77d32a8bec4d84464bee5a99833264e4bafc","observation_id":"7ac0eb4d-3b2d-4184-8f28-c24e802968a7","resolution":{"observed_at":"2026-08-15T19:23:26.775175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.687293Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":"7b1d8aa0-4b0b-4e2f-b338-0b044599b461","year":2023},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.177372Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:c482035688f6656057828fc23f277fdc617472010503b9386c23bbfd27fcbddf","observation_id":"b5381621-f903-4e81-813b-84d462c31096","resolution":{"observed_at":"2026-08-15T19:23:26.692984Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.576664Z","title":"InjecAgent: Benchmarking indirect prompt injections in tool-integrated large language model agents","venue":null,"work_id":"22992b78-0bcf-4baf-8b3f-127371ce653a","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.235345Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:b4ebb9fc39aafa7b5055f085787796267b3dda305f85d7b848774b5c537ebfd5","observation_id":"e083b540-c6d9-4724-a04c-eb2e0008a4a1","resolution":{"observed_at":"2026-08-15T19:23:26.641449Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.560783Z","title":"Formalizing and bench- marking prompt injection attacks and defenses","venue":null,"work_id":"1ffcbd5f-c72f-478c-9c5c-351b3613e6e6","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.305911Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:c2b1cc42084cdf2aa6bf4509fb966355b7710fe68e99ecb66a3cdb411cc57e63","observation_id":"71143061-6018-4965-b9d4-36e9851602dc","resolution":{"observed_at":"2026-08-15T19:23:26.565892Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.03792","last_updated":"2024-05-02T09:25:38Z","snapshot_observed_at":"2026-08-16T14:12:16.610024Z","submitted_at":"2024-03-06T15:40:30Z","title":"Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.03792","snapshot_observed_at":"2026-08-15T19:23:24.310635Z","title":"Neural exec: Learning (and learning from) execution triggers for prompt injection at- tacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.310635Z"},"links":{"cited_paper":"/paper/2403.03792","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:1e6f3e1cda0e7e54c05e5bd3109ecf1454c4e614b07cf3f0397f7b9aff4529d2","observation_id":"3c4625b0-ef24-4a83-aa75-9f0957dfb8b8","resolution":{"observed_at":"2026-08-15T19:23:24.310635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.542060Z","title":"AgentPoison: Red-teaming LLM agents via poisoning memory or knowledge bases","venue":null,"work_id":"05699165-49d0-4c63-be32-30b279533bd0","year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.317500Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:a5e9e62733ae0c416c7275f44f27ca95b64edde3ff52daf2b71f21254d700a8d","observation_id":"8ea2e180-2bd1-4c65-a211-5608300d5860","resolution":{"observed_at":"2026-08-15T19:23:26.547628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.460280Z","title":"PoisonedRAG: Knowledge corruption attacks to retrieval-augmented generation of large language models","venue":null,"work_id":"47e1a531-0f36-4852-9e59-eb72b3011e0c","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.322584Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:12b3d185bb8e29591593d44cfe25568c45ef16ea9ba454476472fd8dc2e04c25","observation_id":"e6e8271c-2077-4d4f-a612-66afc7ac2f0a","resolution":{"observed_at":"2026-08-15T19:23:26.529674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:24.327323Z","title":"Memory injection attacks on LLM agents via query-only interaction","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.327323Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:e3bd399cd96dc0e6996b10012ad55286f807f3a79e8fb679eb681019aa70fafd","observation_id":"fab29f3c-e092-41bd-b1e1-f56cb8276ff3","resolution":{"observed_at":"2026-08-15T19:23:24.327323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.14925","last_updated":"2025-08-19T10:12:35Z","snapshot_observed_at":"2026-08-13T23:21:40.784749Z","submitted_at":"2025-08-19T10:12:35Z","title":"MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.14925","snapshot_observed_at":"2026-08-15T19:23:24.332483Z","title":"MCP- Tox: A benchmark for tool poisoning attack on real-world MCP servers","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.332483Z"},"links":{"cited_paper":"/paper/2508.14925","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:9fde3ea6e65e5d164cf0d529d961216d182c6f72f7a1bd3d6811dda71cda451f","observation_id":"3130b42d-3d50-4847-af82-fc87021e75b9","resolution":{"observed_at":"2026-08-15T19:23:24.332483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:24.337604Z","title":"Breaking the protocol: Security analysis of the model context protocol specification and prompt injection vul- nerabilities in tool-integrated llm agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.337604Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:731f4e86db75bf6f7956ae2db097ce00654d53fbdd1a5baeac241988aec60fe9","observation_id":"ea463893-844b-43df-a3a2-486053c012c6","resolution":{"observed_at":"2026-08-15T19:23:24.337604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.09378","last_updated":"2026-04-10T14:48:29Z","snapshot_observed_at":"2026-08-12T16:45:43.921974Z","submitted_at":"2026-04-10T14:48:29Z","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.09378","snapshot_observed_at":"2026-08-15T19:23:24.342855Z","title":"BadSkill: Backdoor attacks on agent skills via model-in-skill poisoning","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.342855Z"},"links":{"cited_paper":"/paper/2604.09378","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:3c9fe61cf4108d7fbde246d1dab9abb13fb89067f9d890904f06e95608066a1c","observation_id":"4d13b556-52b2-4d0f-9c30-82521fb931bb","resolution":{"observed_at":"2026-08-15T19:23:24.342855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03081","last_updated":"2026-04-03T14:58:58Z","snapshot_observed_at":"2026-08-15T02:21:36.634688Z","submitted_at":"2026-04-03T14:58:58Z","title":"Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03081","snapshot_observed_at":"2026-08-15T19:23:24.395556Z","title":"Supply-chain poisoning attacks against LLM coding agent skill ecosystems","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.395556Z"},"links":{"cited_paper":"/paper/2604.03081","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:59a031e3265fcc757650d70ffca60f1a3820b787fe56676ef591ed446715b226","observation_id":"17b8c90f-f5bf-46aa-ac25-f282a99c8faa","resolution":{"observed_at":"2026-08-15T19:23:24.395556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.355973Z","title":"Jailbreaking leading safety- aligned LLMs with simple adaptive attacks","venue":null,"work_id":"1cdab0c7-eea6-40e9-b93f-26226e11d849","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.447419Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:48ce848f198efc8a196c141fdfa19d6f8ee0672bb0c113c79f18b81d4a4f1d6f","observation_id":"ac56b610-7aca-462b-bc60-0ec5ed13dcaa","resolution":{"observed_at":"2026-08-15T19:23:26.363117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.337612Z","title":"AdvAgent: Controllable blackbox red- teaming on web agents","venue":null,"work_id":"5513e037-1788-4b37-b2df-648e241b20f4","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.452513Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:8222ee56873ff44e521c364ad0bd77763964b979f266a9981900e73aaed7c660","observation_id":"71a3a7df-5262-40c6-bc3c-fdda002bdbb8","resolution":{"observed_at":"2026-08-15T19:23:26.343515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.211398Z","title":"Great, now write an article about that: The crescendo multi-turn LLM jailbreak attack","venue":null,"work_id":"8560f91b-4035-4212-9e64-3387a59bf282","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.457674Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:1caf47b208996c97135dd9e3f5058a8e0f31a56effdb275613527f66a8981689","observation_id":"dfbd1a0e-fded-4518-87fb-51dd9fde217c","resolution":{"observed_at":"2026-08-15T19:23:26.285367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19820","last_updated":"2025-03-28T00:37:10Z","snapshot_observed_at":"2026-08-16T12:54:45.664682Z","submitted_at":"2025-02-27T06:49:16Z","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.19820","snapshot_observed_at":"2026-08-15T19:23:24.461954Z","title":"Foot-in-the-door: A multi-turn jail- break for LLMs","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.461954Z"},"links":{"cited_paper":"/paper/2502.19820","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:81a3b89054bcc5a133a0956118ae2ea1f65d79c43d061e63727d5d48ef0ab97a","observation_id":"d9806c4e-b8d1-4429-9e52-7a705964ac0e","resolution":{"observed_at":"2026-08-15T19:23:24.461954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16822","last_updated":"2024-12-11T18:07:25Z","snapshot_observed_at":"2026-08-13T04:09:48.076759Z","submitted_at":"2024-02-26T18:47:27Z","title":"Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16822","snapshot_observed_at":"2026-08-15T19:23:24.466327Z","title":"Markosyan, Manish Bhatt, Yuning Mao, Minqi Jiang, Jack Parker-Holder, Jakob Foerster, Tim Rocktäschel, and Roberta Raileanu","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.466327Z"},"links":{"cited_paper":"/paper/2402.16822","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:60aa8b86a0570279847a02b074180ce88b007cef1986128cd512011085b8da74","observation_id":"d29c75d6-6fa8-4160-8d41-99c05a59beb6","resolution":{"observed_at":"2026-08-15T19:23:24.466327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15754","last_updated":"2025-03-20T00:13:04Z","snapshot_observed_at":"2026-08-16T12:48:26.512641Z","submitted_at":"2025-03-20T00:13:04Z","title":"AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.15754","snapshot_observed_at":"2026-08-15T19:23:24.471220Z","title":"AutoRedTeamer: Autonomous red teaming with lifelong attack inte- gration","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.471220Z"},"links":{"cited_paper":"/paper/2503.15754","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:b24f568471c36442a94ac955993d1c6b73aa0b74dc6689b161fe1236b37fa1f0","observation_id":"d9328680-fc74-4403-90e4-a2f4825009af","resolution":{"observed_at":"2026-08-15T19:23:24.471220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00348","last_updated":"2025-04-23T01:35:19Z","snapshot_observed_at":"2026-08-16T13:03:54.393815Z","submitted_at":"2024-11-01T04:05:59Z","title":"Attention Tracker: Detecting Prompt Injection Attacks in LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00348","snapshot_observed_at":"2026-08-15T19:23:24.475884Z","title":"Hsu, and Pin-Yu Chen","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.475884Z"},"links":{"cited_paper":"/paper/2411.00348","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:378112ef26866784fe86025b5a2f0e6953d1d05d51ef708262a4d8e771ae1a65","observation_id":"7d3c065b-9347-474a-8a72-e9211a621ee2","resolution":{"observed_at":"2026-08-15T19:23:24.475884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.192761Z","title":"MELON: Provable defense against indirect prompt injection attacks in ai agents","venue":null,"work_id":"5b0523b0-9de4-4c5f-aa35-abeefed00b04","year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.542261Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:b2fa33fc1e5862f2d170d7759ca9d7adfb39396f87c5f7ec00bba824c9982eaa","observation_id":"7fe0d7ea-de04-4fc9-a3b0-3ca6239c32fd","resolution":{"observed_at":"2026-08-15T19:23:26.198415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03574","last_updated":"2025-05-06T14:34:21Z","snapshot_observed_at":"2026-08-15T23:45:54.048231Z","submitted_at":"2025-05-06T14:34:21Z","title":"LlamaFirewall: An open source guardrail system for building secure AI agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03574","snapshot_observed_at":"2026-08-15T19:23:24.603209Z","title":"LlamaFirewall: An open source guardrail system for building secure ai agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.603209Z"},"links":{"cited_paper":"/paper/2505.03574","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:94f7e06b01084eb6677d8c5edc97ddc7de244020da465e97ff32fa5953dda4fc","observation_id":"0c40dc41-5df5-4ade-918d-97f270bf2415","resolution":{"observed_at":"2026-08-15T19:23:24.603209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.19091","last_updated":"2024-10-10T15:29:07Z","snapshot_observed_at":"2026-08-16T13:14:39.463051Z","submitted_at":"2024-09-27T18:41:58Z","title":"System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.19091","snapshot_observed_at":"2026-08-15T19:23:24.635486Z","title":"System-level defense against indirect prompt injec- tion attacks: An information flow control perspec- tive","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.635486Z"},"links":{"cited_paper":"/paper/2409.19091","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:dfc6f636f51fdab00f2cd348e93d6b8dba915d76913c25198895cc9feabef0c7","observation_id":"087971ee-205c-4594-9a1b-8f777b528b8f","resolution":{"observed_at":"2026-08-15T19:23:24.635486Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-13T15:19:02.871791Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-15T19:23:24.640513Z","title":"Defeating prompt injections by design","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.640513Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:30e9bff6e770711e5f771bbf757fe719e5739758c45dd177ee8042f6ac56295b","observation_id":"8dc96646-8955-497a-9419-d378b775c8fb","resolution":{"observed_at":"2026-08-15T19:23:24.640513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.175146Z","title":"Poskitt, and Jun Sun","venue":null,"work_id":"20acfcd4-34c3-4272-bf9c-170d17e45c7d","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.646151Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:9dc7b801e62713e2a6916e0a611ec811a1890c4b2ed72e4e688b7088b11df60e","observation_id":"b86f02fe-c06f-4ef0-9bae-b8b4f25c9135","resolution":{"observed_at":"2026-08-15T19:23:26.181036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:26.095376Z","title":"Firewalls to secure dynamic LLM agentic net- works.Transactions on Machine Learning Re- search, 2026","venue":null,"work_id":"ea7108cb-cd48-400a-8c7b-0f9877c8f196","year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.651782Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:ff86bfc5067844e5156e1c5639a6ba19ce298eb04816567375e317e2ef45b175","observation_id":"96d5e586-6c1f-407b-870b-c50c4ce17869","resolution":{"observed_at":"2026-08-15T19:23:26.161165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.19457","last_updated":"2026-02-14T11:42:30Z","snapshot_observed_at":"2026-08-14T13:34:39.415942Z","submitted_at":"2025-07-25T17:42:32Z","title":"GEPA: Reflective Prompt Evolution Can Outperform Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.19457","snapshot_observed_at":"2026-08-15T19:23:24.657083Z","title":"Dimakis, Ion Stoica, Dan Klein, Matei Zaharia, and Omar Khattab","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.657083Z"},"links":{"cited_paper":"/paper/2507.19457","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:438b3ad6cd31d331de453dbd99a1f33996ebcf70c7c3395e10809572da56cb81","observation_id":"55805c6b-39f5-4ce9-a281-cd22c1c61c3b","resolution":{"observed_at":"2026-08-15T19:23:24.657083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08435","last_updated":"2025-03-02T05:13:28Z","snapshot_observed_at":"2026-08-06T11:45:45.286982Z","submitted_at":"2024-08-15T21:59:23Z","title":"Automated Design of Agentic Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08435","snapshot_observed_at":"2026-08-15T19:23:24.663813Z","title":"Auto- mated design of agentic systems","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.663813Z"},"links":{"cited_paper":"/paper/2408.08435","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:a14bb3eb533df416b1a4c1bff19c5798caee3a7e467e77a6267fa62f8188cce1","observation_id":"f72103cf-2a16-486f-8ba3-45c191f327d5","resolution":{"observed_at":"2026-08-15T19:23:24.663813Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.22954","last_updated":"2026-03-12T23:47:40Z","snapshot_observed_at":"2026-08-13T19:47:12.152634Z","submitted_at":"2025-05-29T00:26:15Z","title":"Darwin Godel Machine: Open-Ended Evolution of Self-Improving Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.22954","snapshot_observed_at":"2026-08-15T19:23:24.669078Z","title":"Darwin godel machine: Open-ended evolution of self-improving agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.669078Z"},"links":{"cited_paper":"/paper/2505.22954","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:dcfab3e59f691dd2b3f9208feb49812fd5749bbe8802ca0630aa9fc90a93db9b","observation_id":"c78c964a-4af1-4fa5-9ddb-708aa2d9ade7","resolution":{"observed_at":"2026-08-15T19:23:24.669078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.22166","last_updated":"2026-05-27T04:34:36Z","snapshot_observed_at":"2026-07-06T23:32:30.578213Z","submitted_at":"2026-05-21T08:36:49Z","title":"Adapting the Interface, Not the Model: Runtime Harness Adaptation for Deterministic LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.22166","snapshot_observed_at":"2026-08-15T19:23:24.742465Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.742465Z"},"links":{"cited_paper":"/paper/2605.22166","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:38ca6d7b702b4e96a2f43ae04db76e64fce0a434c80d8ef1fb3f05964cc5f6ed","observation_id":"58825cca-05e2-42e7-93b9-fe4c973ab8f8","resolution":{"observed_at":"2026-08-15T19:23:24.742465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.28052","last_updated":"2026-03-30T05:33:50Z","snapshot_observed_at":"2026-08-11T05:18:08.192130Z","submitted_at":"2026-03-30T05:33:50Z","title":"Meta-Harness: End-to-End Optimization of Model Harnesses","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.28052","snapshot_observed_at":"2026-08-15T19:23:24.799776Z","title":"Meta- harness: End-to-end optimization of model har- nesses","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.799776Z"},"links":{"cited_paper":"/paper/2603.28052","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:f44a49446fe52c6169a458b33fd7a1aa729093acf308916e85dca58943f4f365","observation_id":"ca211a88-9649-43b9-ae83-e6ad7a7e2f25","resolution":{"observed_at":"2026-08-15T19:23:24.799776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-13T16:55:46.498156Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-15T19:23:24.818301Z","title":"V oyager: An open-ended em- bodied agent with large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.818301Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:eb323f6ab7106e446dbe7c52c223c87b7d3d040fa0b04c6170990aa26c6bad8e","observation_id":"d8286467-81d4-4a9a-9fc3-74e5329b345a","resolution":{"observed_at":"2026-08-15T19:23:24.818301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.23904","last_updated":"2026-05-25T17:58:16Z","snapshot_observed_at":"2026-08-05T06:54:08.846880Z","submitted_at":"2026-05-22T17:59:50Z","title":"SkillOpt: Executive Strategy for Self-Evolving Agent Skills","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.23904","snapshot_observed_at":"2026-08-15T19:23:24.823874Z","title":"Skillopt: Executive strategy for self-evolving agent skills","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.823874Z"},"links":{"cited_paper":"/paper/2605.23904","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:9c8b19f8f846368709567187ad28c245a9451c9633bda845895a68bbc557a829","observation_id":"5d259132-fe80-4853-a04c-eeea50ad899f","resolution":{"observed_at":"2026-08-15T19:23:24.823874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.05743","last_updated":"2026-06-04T06:14:08Z","snapshot_observed_at":"2026-08-12T15:35:20.345190Z","submitted_at":"2026-06-04T06:14:08Z","title":"Membrane: A Self-Evolving Contrastive Safety Memory for LLM Agent Defense","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.05743","snapshot_observed_at":"2026-08-15T19:23:24.829197Z","title":"decisions","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:24.829197Z"},"links":{"cited_paper":"/paper/2606.05743","citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:fe305600bbb711930a66126529acdab37d08b9035a01bcce8806532fb2c9023b","observation_id":"fe23aa23-019a-466e-a666-4720aaf5f33a","resolution":{"observed_at":"2026-08-15T19:23:24.829197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:23:27.175082Z","title":null,"venue":null,"work_id":"45f608bd-c046-4aa3-a6bc-276bf22bf3cb","year":null},"citing_paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-15T19:23:23.614898Z"},"links":{"citing_paper":"/paper/2608.12977"},"observation_digest":"sha256:afba0415fb159ba8115b9d9d02b5f13982ec71cb79d523ec423408cd826147df","observation_id":"bb1eaa3d-9d47-4ded-8a55-8a4e758fdbaf","resolution":{"observed_at":"2026-08-15T19:23:27.181684Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.12977","last_updated":"2026-08-13T08:57:04Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T14:11:33.035378Z","submitted_at":"2026-08-13T08:57:04Z","title":"Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents"},"reference_resolution":{"displayed":76,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":41,"verified_exact":0,"verified_fuzzy":34},"total_outbound_references":76},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 76 of 76 outbound references and 0 inbound Pith citation observations for arXiv:2608.12977."}