Paper Citation Record · LEDGER

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents

As of 19 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 3 inbound Pith citation observations for arXiv:2605.28201.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.28201 v1

Coverage vector

measured 50 of 50 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-29T12:34:53.874957Z

measured 53 of 53 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T14:49:41.266427Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-11T14:49:41.535484Z

Reference resolution

50 of 50 outbound references displayed

verified exact2
verified fuzzy0
unresolved46
parse uncertain0
malformed identifier1
metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 9f30ed2a-4486-4fe3-8898-c420c081a365 · outbound

This paper cites Taylor, Krishnamurthy Dj Dvijotham, and Alexandre Lacoste.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Taylor, Krishnamurthy Dj Dvijotham, and Alexandre Lacoste

Reference 1

Resolution: verified exact; arxiv_id, observed 2026-06-29T12:43:26.026699Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e3e23960-356d-4333-b927-91e81df1449c · outbound

This paper cites SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems

Reference 2

Resolution: verified exact; local_arxiv, observed 2026-06-29T12:43:26.021462Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7c90d95c-7938-47ba-a279-80d64f2716b1 · outbound

This paper cites ClawSafety: "Safe" LLMs, Unsafe Agents.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents ClawSafety: "Safe" LLMs, Unsafe Agents

Reference 3

Resolution: metadata mismatch; local_arxiv, observed 2026-06-29T12:43:26.025482Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 574e9d82-7109-4db2-8f27-eb7f16935b07 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 66c1b84b-e204-4ec5-b25d-4af770df489e · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d6d88c9f-7ae0-4459-9a8a-b5d263e6ff9c · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 34b21ba0-e886-44ee-b7ba-8c09c47642ef · outbound

This paper cites harm_label.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents harm_label

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6c505526-7a4f-4992-b7ce-f5749d24b2af · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 14ecb4b7-65b2-4d3f-a970-27e406aff42a · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ab6ebd7-ab50-4f75-85a3-7cc109779ff4 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9dc0ff9-12f1-4aaf-b4c6-22cd82ded125 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e1c3d73d-1320-435b-adc7-198961335484 · outbound

This paper cites attack_type.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents attack_type

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a3375851-09ba-438f-a5a5-1896b66a8474 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99c7a6f8-ff49-4f4d-b53b-e2f2190347d9 · outbound

This paper cites {ASK_USER_FOR}.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents {ASK_USER_FOR}

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ed8672d5-79ec-45fb-8607-c5eb5e43ec66 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0041c935-8589-4230-867e-1dceac492961 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d0fcfabe-c6a6-4f1e-a575-2154c20732b6 · outbound

This paper cites {BIG_SKILL_ID}.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents {BIG_SKILL_ID}

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cf047a4e-0d34-403d-81f6-62d8ef4f6d2b · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cbc55284-8139-47bd-87a2-e9cb46189e63 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5a7e5e6-992b-4a6e-8ab8-5a0aeb7e0429 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 20

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fd2b6fba-5cb2-405b-9f6a-f94569571e54 · outbound

This paper cites Use ISO format for dates (YYYY-MM-DD) and date-times (YYYY-MM- DD HH:MM) in all simulated outputs.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Use ISO format for dates (YYYY-MM-DD) and date-times (YYYY-MM- DD HH:MM) in all simulated outputs

Reference 21

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ed47ff41-2f53-4589-b0da-10f7e35301b7 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a2935816-a509-43e7-8b9c-61ffee1c01eb · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9430317-b6d5-497b-8dab-4753c4b5e0af · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8fb233f1-71ea-477b-a0c3-d2db79c7422e · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 25

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d933e29e-ec37-409f-908c-6358d4b4d6a7 · outbound

This paper cites Do not add any explanation or additional text outside the JSON object.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Do not add any explanation or additional text outside the JSON object

Reference 26

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fd321010-9911-4f64-abbe-2dabe4a405a8 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dcf94f4d-9d17-4aab-a7ef-0ee80d32b78d · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 590404e4-36da-471f-845f-9da115aad369 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fdab6190-1958-4265-b2cd-465258112b33 · outbound

This paper cites No additional text.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents No additional text

Reference 30

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d5d2b31e-bee7-4841-9446-847356305277 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 31

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0541ceb5-3fe3-4220-b96d-15ee4d3278e1 · outbound

This paper cites reasoning.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents reasoning

Reference 32

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f8fa710c-c610-4094-a173-acb5941a99c2 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 89b875cc-06e7-4592-87c8-218d10daf0cb · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f9f2d54a-021c-4af8-8e51-af363a57a612 · outbound

This paper cites my saved X.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents my saved X

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 42c4b93a-694d-4acd-9d01-e559c2d96935 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 36

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5c9da679-8ade-4142-8526-b6ef946794fc · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 37

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 883e04dc-b831-415e-8120-504949cd972a · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 38

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2b2d7549-960b-4e0e-85f7-975fe097de8d · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 39

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 725b6484-2bbe-4ecb-bd5a-843f9c9cc7d7 · outbound

This paper cites A.9 Hierarchical Skill Generation Prompt A.14: Hierarchical Skill Generation Purpose: Generate one BIG skill and multiple SMALL skills for the skill state.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents A.9 Hierarchical Skill Generation Prompt A.14: Hierarchical Skill Generation Purpose: Generate one BIG skill and multiple SMALL skills for the skill state

Reference 40

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 760c699f-86c6-4ac4-a183-c0244656836f · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 41

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 58697077-71e5-44a7-9433-1b37a8d022ce · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 42

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1ab3956b-7964-42b7-b9c6-a12cc8d5b149 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 43

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 66a6573c-9ebb-4c52-82af-d8869b65a4b0 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 44

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 562882c0-7c66-44a2-9261-55f885c9f236 · outbound

This paper cites revised_template.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents revised_template

Reference 45

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c66523a1-f658-4286-8b5f-708b994da70d · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 46

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 58a6397d-cc18-4ea1-80b6-6145c286c832 · outbound

This paper cites Choose the best evaluation logic type: - ordered_trace_check for multi-step attacks - argument_check for single-step precise attacks - tool_match for broad attacks Critical rules:.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Choose the best evaluation logic type: - ordered_trace_check for multi-step attacks - argument_check for single-step precise attacks - tool_match for broad attacks Critical rules:

Reference 47

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 086185a3-e039-4d02-a968-6825318c562c · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 48

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9f29181c-ae0d-4004-bf78-84ff5e7efea7 · outbound

This paper cites an unresolved cited work.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents Unresolved cited work

Reference 49

Resolution: unresolved; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9518c797-2308-4a8e-870f-58735329011c · outbound

This paper cites eval_type.

Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents eval_type

Reference 50

Resolution: malformed identifier; no resolver link, observed 2026-06-29T12:34:53.874957Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 777a40c9-e322-4e50-a042-01ff3488edef · inbound

Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agents cites this paper.

Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agents Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-01T08:54:36.800533Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b6d8a565-1b5d-4975-beda-d1fa6ad04f95 · inbound

Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings cites this paper.

Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents

Reference 96

Resolution: unresolved; no resolver link, observed 2026-08-01T06:18:09.181678Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ffd9718e-cce8-428f-8102-f52ebf6c18cb · inbound

ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization cites this paper.

ElasticBack: Stealthy Conditional Backdoor in LLM-Agent Skills via Coupled Trigger-Rule Optimization Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents

Reference 17

Resolution: metadata mismatch; local_arxiv, observed 2026-08-11T14:49:41.540618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.