Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-12T00:47:18.292724Z
Paper Citation Record · LEDGER
As of 19 August 2026, this Paper Citation Record lists 72 of 72 outbound references and 0 inbound Pith citation observations for arXiv:2608.07952.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-12T00:47:18.292724Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
72 of 72 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 5664e171-dcae-403d-a0f2-1df2d202e60e · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Constitutional AI: Harmlessness from AI Feedback
Reference 1
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4c40ce4a-6edb-440c-9b0a-0e590444ccf1 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems LangChain : Building applications with LLMs through composability
Reference 2
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 6e7b16b5-4080-4e5a-a2a0-6599684e5554 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Teaching large language models to self-debug
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 972b417d-7b23-4cd0-bd93-196f3b89ee21 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems AgentPoison : Red-teaming LLM agents via poisoning memory or knowledge bases
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 8131fbdb-aaa0-4fd5-8e21-6401988e36bd · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 48382d43-30bc-462a-bc93-fac40654208a · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Memory --- CrewAI documentation
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 9f8bcc35-be94-4a63-bb0c-a733c76faf43 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems AgentDojo : A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 91428441-ce7c-4c87-b9de-6c431df408c9 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Memory poisoning attack and defense on memory based LLM -agents
Reference 8
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 295071e0-6fe5-4974-8e70-ecf2a989268b · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Memory injection attacks on LLM agents via query-only interaction
Reference 9
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b99095e3-d2d6-48ad-9c55-f788e2f830c5 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems The transaction concept: Virtues and limitations
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation ab9ea68d-3f89-451e-b80b-9a363db4c68a · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Not what you've signed up for: Compromising real-world LLM -integrated applications with indirect prompt injection
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bb88682c-46c0-4244-bc0f-901388cd3888 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 12
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 8d6ab666-3a21-4bea-9b21-cbffb28bc38c · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation d5fb3dc3-43dc-495b-bbc5-062ab171f19e · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems ConversationBufferMemory source, LangChain v0.0.200
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 498c7dea-8876-4e37-ad7f-33128d71cd04 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems CrewAI : Framework for orchestrating role-playing autonomous AI agents
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation b86886f7-b4a0-418b-b94e-5d81a5024238 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems MemGPT: Towards LLMs as Operating Systems
Reference 16
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 50f8f0e1-3b51-44fd-abb4-32098688cca6 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems G., Zhang, T., Wang, X., and Gonzalez, J
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation deb2afdf-bad3-4a6b-adcf-9f93359dc8fa · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems When LLMs play the telephone game: Cultural attractors as conceptual tools to evaluate LLMs in multi-turn settings
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 554012df-892f-47fa-8e75-87d1a524af19 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems ToolLLM : Facilitating large language models to master 16000+ real-world APIs
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation c4283ba1-7a74-4e3c-9ebb-fadb747a67e1 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Toolformer : Language models can teach themselves to use tools
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation ca75bebd-c20a-4390-a89f-693841e2bdcd · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Ignore this title and HackAPrompt : Exposing systemic vulnerabilities of LLMs through a global prompt hacking competition
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 032102e5-ac86-462e-9e79-48b79f03bc70 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems AI models collapse when trained on recursively generated data
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation ca31bf21-49e0-43d4-b704-13e237f87a29 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems AutoGPT : An autonomous GPT-4 experiment
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation a430c3ee-c913-45a9-b6a6-2c62eebf546b · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Auto-GPT-Plugins : Plugins for Auto-GPT
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 2a9429c5-a301-4e8f-bf5b-b985b721997b · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions
Reference 25
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 851b3616-c557-403e-af5a-768903ea7538 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unveiling attractor cycles in large language models: A dynamical systems view of successive paraphrasing
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation a03a6404-94e0-471e-972d-0baaa1c0ba89 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems MindGuard : Intrinsic decision inspection for securing LLM agents against metadata poisoning
Reference 27
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c6000436-ab45-4b5b-9128-e2de2cc16494 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers
Reference 28
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3f0e3db5-f631-41a2-b896-1f4df9c0cec6 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Jailbroken : How does LLM safety training fail? In Advances in Neural Information Processing Systems, 2023
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 1faa3b6f-9184-4a70-85b5-fbf7e967fd8e · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 30
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 5292a3c1-795c-4d43-b672-c387a347d801 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation
Reference 31
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c9ed6905-6b0d-4113-8b24-00d46a194a2f · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems ReAct : Synergizing reasoning and acting in language models
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 22f497e4-5ff6-41cc-bc02-eb51b26c21e5 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents
Reference 33
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f5e45f0f-742e-44b6-9d19-3587841e8e23 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Agent security bench ( ASB ): Formalizing and benchmarking attacks and defenses in LLM -based agents
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 794178d4-e9dd-407f-8893-6c360e9cec16 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems AgentSentry : Mitigating indirect prompt injection in LLM agents via temporal causal diagnostics and context purification
Reference 35
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 03d742b2-efc5-4676-962d-d6f37f20f3f1 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Poisoning retrieval corpora by injecting adversarial passages
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8a1d15d4-8840-46d8-9878-f032fcf9c810 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models
Reference 37
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d0ac2333-c1fd-4420-860f-2a579f94f2f4 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Advances in Neural Information Processing Systems , year=
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 0773668c-e8e9-495e-af27-ad2d3cd87106 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 39
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b7ceb308-1113-4320-ab6b-876587fcffa4 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 40
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dfe8bd05-48ab-454e-b078-4a06b29bd2af · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Agent Security Bench (
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bec8a449-db40-4f1c-b634-79bbad9e6431 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Memory Poisoning Attack and Defense on Memory Based
Reference 42
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation b8fea291-1004-475f-928e-275ff4e56ddf · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 43
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 38a74599-371a-4503-aa5a-1347340d2f03 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 44
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 7d55e3e3-f2aa-4af0-8639-8cc3f0886d95 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 45
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bde1ce4c-ff76-43f2-b18a-fb2db3807e0c · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems International Conference on Learning Representations , year=
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 95ce2aca-ab4b-4f55-8ee9-fd7836b65ff4 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems International Conference on Learning Representations , year=
Reference 47
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bfb9f748-82ef-4748-abe6-1b9eac78e258 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Ignore This Title and
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 1a5fd6d0-351e-4af8-bb0a-9ac377e9af73 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 49
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8c6e762c-87ef-4993-b519-2d8ff4584f6d · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 32fd552a-060b-4bf1-8f53-a4d5feb682fb · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation e4af73a6-bfbf-4c8e-9fae-7c3a04b4331c · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 84c2f5c0-2531-4594-b1e8-d4f414cb7393 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Very Large Data Bases , pages=
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation c375e976-300e-433c-8b8c-616edc1ccbbc · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Not what you've signed up for: Compromising real-world
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation c7bb07d5-a08e-4cbb-a9af-e4d29d1893eb · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems The instruction hierarchy: Training
Reference 55
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation f218347c-8484-4fc6-b19a-2e501d439816 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 56
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation dd22fad6-f5df-44a3-8225-272dfa283b1b · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing , year=
Reference 57
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation a18a294f-c673-4b95-9d50-f8e2eeced234 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 58
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1fb5bf88-822d-4657-8ee3-3617aff0eeda · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 59
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 83a6951a-2dc7-442d-9882-998d37400244 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 60
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bf79c057-0db1-4972-91fb-3336ff443e4a · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems 2024 , howpublished=
Reference 61
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation d8a40033-7068-4a37-85a9-1dae254b5935 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems 2002 , publisher=
Reference 62
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b0bd76ab-f931-4228-b429-2dd91b66f18b · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems 2006 , publisher=
Reference 63
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0243af5f-b3ab-4765-a47a-c95409adac9b · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Journal of the American Statistical Association , volume=
Reference 64
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 69629d8b-50bb-4096-9c17-73a943578b14 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Advances in Neural Information Processing Systems Datasets and Benchmarks Track , year=
Reference 65
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 6db3593c-2534-4981-934c-ed4bf06b7927 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 66
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c619214a-ec36-4144-b20a-355643371e93 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Constitutional
Reference 67
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d5a4a7db-b83e-4792-8f3d-874daaba8324 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Memory Injection Attacks on
Reference 68
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation d5ca90df-1b31-46f2-8780-b48f28e6b418 · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 69
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation ec1ed73d-88a7-4d2f-94fb-15025da7c4ac · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 70
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation e94f78a1-2bb9-4117-b42e-33402cfb16bb · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems Unresolved cited work
Reference 71
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
Observation 6d3c517f-25ed-495a-b0bd-fd2efd430dab · outbound
Persistent Semantic Entities in Tool-Augmented LLM Systems 2024 , howpublished=
Reference 72
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.
No inbound Pith citation observations are available.