Paper Citation Record · LEDGER

SoK: The Attack Surface of Agentic AI - Tools and Autonomy

As of 20 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:2603.22928.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2603.22928 v2

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 10 of 10 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 10 of 10 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-07-11T02:41:24.813416Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-11T02:47:50.254511Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation d8c7c313-37c3-4a08-900c-4c6e96e30665 · inbound

SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems cites this paper.

SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 28

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation b0cd2e70-8c58-432c-a4f2-2b8a17f50aa2 · inbound

A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms cites this paper.

A Formal Security Framework for MCP-Based AI Agents: Threat Taxonomy, Verification Models, and Defense Mechanisms SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 27

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 287fef8e-2eef-47bf-8305-0f94ee4cfeb9 · inbound

LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments cites this paper.

LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 10

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 3ca4c3cd-6b4d-45fd-94ef-b44b234b9aba · inbound

Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback cites this paper.

Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 41

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 6ba71fd9-3176-440f-920a-78c49de5037b · inbound

What You Approve Is What Executes: Consent Integrity for Black-Box LLM Agents cites this paper.

What You Approve Is What Executes: Consent Integrity for Black-Box LLM Agents SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 29

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 46d78f36-85f8-460d-960a-beefad30dab0 · inbound

A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents cites this paper.

A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 5dacf644-5d70-4bf7-b504-9cceeaa683a1 · inbound

Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies cites this paper.

Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation c61486d8-28f7-4389-bc83-76da6b4aaa84 · inbound

Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents cites this paper.

Adaptive Evaluation of Out-of-Band Defenses Against Prompt Injection in LLM Agents SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 32

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation 1cbc9a31-29ac-462c-ba18-8d4fd37b8fc8 · inbound

A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems cites this paper.

A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 6

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

Observation a1ba4bd8-ba67-4e25-817a-e8c036be8f5f · inbound

The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities cites this paper.

The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities SoK: The Attack Surface of Agentic AI - Tools and Autonomy

Reference 1

Resolution: verified exact; arxiv_id, observed 2026-08-12T02:24:10.274858Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.