Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-10T08:08:21.077290Z
Paper Citation Record · LEDGER
As of 20 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 0 inbound Pith citation observations for arXiv:2607.08395.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-07-10T08:08:21.077290Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
46 of 46 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation e6ff9423-36de-467c-aa3e-927d60eeab20 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Aho and Jeffrey D
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2f51def9-93c5-414b-b32f-55393c1a6791 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ded25281-05bc-4c49-9945-8acda74d7277 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Chandra and Dexter C
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation d4745412-3b17-46a6-b353-588e525b16d3 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Scalable training of
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 27d94936-333e-4db6-9e0c-cd87cdd3bc59 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation f8aa2823-63fa-4362-90a0-244f608d4399 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Tetreault , title =
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 047cce80-0f3b-482c-b597-45704162b827 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents A Framework for Learning Predictive Structures from Multiple Tasks and Unlabeled Data , Volume =
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 212ad4b6-71d5-4adc-873f-fc770a77d76b · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Identifying the Risks of LM Agents with an LM-Emulated Sandbox
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 87723374-d6fc-4cbb-8890-dbf9b39153ba · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2024 , eprint =
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation a9298767-e182-4f4e-9cfa-461130500f4c · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 35361c3d-507e-4b66-9ff5-9a6b72856d28 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Agent-SafetyBench: Evaluating the Safety of LLM Agents
Reference 11
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2e336d02-53eb-4e4d-9b4a-baf42fdeee37 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 93c5e2e3-aec8-47d6-abf0-e26a4782052f · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents and Pinto, Jeremy and Khan, Anaum and Bouchard, Louis-Fran
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation de04a218-7489-443c-b873-1295874f59fb · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , eprint =
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation edc79d56-99de-4c69-826c-e5293eb9ed9c · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2024 , archivePrefix =
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 78919c18-a2a0-4337-957f-b6d15cd09539 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents StruQ: Defending Against Prompt Injection with Structured Queries
Reference 16
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation b0d2471a-cb92-4ab3-b7b7-449b2c03e040 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 8307068c-9e34-4b53-a007-691be5f826ac · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5ad7d524-9616-467d-86b6-7f7de54617e2 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents N e M o Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Rails
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 2f4713cf-d49c-4c79-8e16-59eb00ebb682 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 42dda8c5-ef59-480f-a63d-b193e5386289 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents G-Eval: NLG Evaluation using GPT-4 with Better Human Alignment
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 15392d6f-5a54-41cf-8448-3330a8117018 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 67af150f-91ec-4ada-8b7f-1468dc7adce1 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , url =
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 6656da4c-d36b-443a-a95b-d9f7ab9a934d · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , url =
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5ed95c6a-6115-4749-9d13-7437a80653b7 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents O'Brien and Carrie Jun Cai and Meredith Ringel Morris and Percy Liang and Michael S
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 76313bb9-8deb-444d-b9ae-012b07def7bf · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Voyager: An Open-Ended Embodied Agent with Large Language Models
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation aedee156-93bf-49b3-8835-a4d7916c0f03 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents LlamaFirewall: An open source guardrail system for building secure AI agents
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation b5c5447c-1768-458d-a84a-12699ad9842c · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Prompt Injection attack against LLM-integrated Applications
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation c3cf1fd7-def9-47f4-9bcd-4535e81c31d8 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation f8f24a97-de4e-4a4b-bf1a-4aa51fdbb6fa · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2023 , eprint =
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 55c2d5dd-8f7d-4980-baad-71197a5a1f51 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Meta secalign: A secure foundation llm against prompt injection attacks
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 52af86bb-b290-478c-80e7-c339a5cf4386 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Yi Liu, Gelei Deng, Yuekang Li, Kailong Wang, Tianwei Zhang, Yepang Liu, Haoyu Wang, Yan Zheng, and Yang Liu
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 83b1748d-5466-41c1-9175-e13dfae6ddec · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents OpenGuardrails: A Configurable, Unified, and Scalable Guardrails Platform for Large Language Models
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 4edf4873-8aa1-4d96-aeab-faec9d7611b0 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Toward Securing
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5837ba3d-d119-4d4e-9721-d90a4044c6b9 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents and Lombardo, J
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 72da2104-17aa-418a-9a93-304d17119d3a · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Authenticated Delegation and Authorized AI Agents
Reference 36
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 93c07458-c99a-4d5b-b8d6-6341f4fd33e4 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Owner-Harm: A Missing Threat Model for AI Agent Safety
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation f8fe62a6-3db1-4c0a-8e13-a04409c7b331 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Agent-Sentry: Bounding LLM Agents via Execution Provenance
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5d978f9b-f689-4b46-a6a1-fdea60cde3ec · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2025 , eprint =
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation a68bfef1-a9c3-4a9d-80d8-9d1d672d2a71 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Securing
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 36d2a7a9-9240-4569-8644-3f7827787bcd · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2026 , url =
Reference 41
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 5e208f93-a8b6-4633-915d-964d1741657b · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Openclaw prism: A zero-fork, defense-in-depth runtime security layer for tool-augmented llm agents
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation 1912f538-b7c3-4d29-87d0-a343f6b956a6 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents AgentWard: A Lifecycle Security Architecture for Autonomous AI Agents
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation fe7a1014-63d5-4f3a-8fc0-a428add4bdc7 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation ca113b24-abee-4027-a1cb-241960562188 · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents Unresolved cited work
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
Observation a20ddd14-8d3e-40ee-89cd-4c7d240b8fbc · outbound
Token-Flow Firewall: Semantic Runtime Auditing for Persistent AI Agents 2026 , url =
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.
No inbound Pith citation observations are available.