Paper Citation Record · LEDGER

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

As of 17 August 2026, this Paper Citation Record lists 21 of 21 outbound references and 18 inbound Pith citation observations for arXiv:2504.19956.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2504.19956 v2

Coverage vector

measured 21 of 21 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-16T05:42:36.058458Z

measured 39 of 39 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 18 of 18 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-16T00:16:52.504149Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

21 of 21 outbound references displayed

verified exact1
verified fuzzy15
unresolved5
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation d22b399f-4b69-4540-b0af-92171d2468d9 · outbound

This paper cites Towards Effective GenAI Multi-Agent Collaboration: Design and Evaluation for Enterprise Applications.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Towards Effective GenAI Multi-Agent Collaboration: Design and Evaluation for Enterprise Applications

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-16T05:42:35.984353Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7437c0c5-6b17-4108-b035-f14bd99770ec · outbound

This paper cites AI risk management framework (AI RMF 1.0),.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents AI risk management framework (AI RMF 1.0),

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.456402Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 6bd91bc7-f8e9-4e99-8a09-7d0533984a29 · outbound

This paper cites Safeguarding AI Agents: Developing and Analyzing Safety Architectures.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Safeguarding AI Agents: Developing and Analyzing Safety Architectures

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-16T05:42:35.992838Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ff44c959-4be7-4890-824d-d5be542cf48f · outbound

This paper cites Securing the AI supply chain: Mitigating vulnerabilities in AI model development and deployment,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Securing the AI supply chain: Mitigating vulnerabilities in AI model development and deployment,

Reference 4

Resolution: verified exact; doi, observed 2026-08-16T05:42:36.089104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 1d231140-399a-4d6f-9c6b-0b6120841f3a · outbound

This paper cites OW ASP top 10 for large language model ap- plications,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents OW ASP top 10 for large language model ap- plications,

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.446616Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 6e2351d8-eed8-451c-ae53-3ab0a210a369 · outbound

This paper cites Adversarial threat landscape for artificial-intelligence systems (ATLAS),.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Adversarial threat landscape for artificial-intelligence systems (ATLAS),

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.436033Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 4f8d709c-b59c-49a1-8b7a-c6363545b201 · outbound

This paper cites Agentic AI threat modeling framework: MAESTRO,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Agentic AI threat modeling framework: MAESTRO,

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.425404Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation d7012df3-95c8-4570-834f-60b1c10f959e · outbound

This paper cites The emerged security and privacy of LLM agent: A survey with case studies,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents The emerged security and privacy of LLM agent: A survey with case studies,

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-16T05:42:36.013327Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 57c8a553-10f7-4641-b744-b787a533d385 · outbound

This paper cites AGENTPOISON: Red-teaming LLM agents via poisoning memory or knowledge bases,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents AGENTPOISON: Red-teaming LLM agents via poisoning memory or knowledge bases,

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.414114Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 6b59ca23-603a-4de7-8210-b80f94940d63 · outbound

This paper cites Agentic threats and mitigation,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Agentic threats and mitigation,

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.403681Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 78bacdd4-8f1a-43f7-97b7-2af40f4be333 · outbound

This paper cites Multi-agentic system threat modelling guide OW ASP GenAI security project,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Multi-agentic system threat modelling guide OW ASP GenAI security project,

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-16T05:42:36.024315Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea1c3e56-0e5c-4fe7-a66c-3959d5c3014f · outbound

This paper cites AI 100-2 e2023 adversarial machine learning: A taxonomy and terminology of attacks and mitigations,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents AI 100-2 e2023 adversarial machine learning: A taxonomy and terminology of attacks and mitigations,

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.393194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 05209724-48a4-4c0f-90d6-3d0f82fb3708 · outbound

This paper cites Announcing the OW ASP LLM and Gen AI security project initiative for securing agentic applications,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Announcing the OW ASP LLM and Gen AI security project initiative for securing agentic applications,

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.383003Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 538929a2-f401-46b8-8d95-624376d48e5b · outbound

This paper cites LLM and GenAI data security best practices,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents LLM and GenAI data security best practices,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-16T05:42:36.035188Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 04f225de-5764-4eab-a833-1c1994c48b55 · outbound

This paper cites MITRE ATT&CK® framework for machine learning,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents MITRE ATT&CK® framework for machine learning,

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.372773Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 03f85e59-66b1-4248-9263-cf54a75267c9 · outbound

This paper cites Learning from Tay’s introduction,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Learning from Tay’s introduction,

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.362025Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 452f8822-9506-42f9-86c7-7ceccec290d5 · outbound

This paper cites GitHub Copilot Chat: From prompt injection to data exfiltration,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents GitHub Copilot Chat: From prompt injection to data exfiltration,

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.350829Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation aeb248ed-fcd5-4c73-969a-efe4e8a02384 · outbound

This paper cites 12, 2025.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents 12, 2025

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.338786Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation f56105d4-8597-4e04-adbd-f99cbf83f859 · outbound

This paper cites AutoGPT,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents AutoGPT,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.328055Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 7d51297e-8a47-41f6-990d-b1cb7c068ebe · outbound

This paper cites Semantic kernel,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Semantic kernel,

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.317732Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 1e58c7f1-98c4-4caa-ab50-be4b3daa26e7 · outbound

This paper cites Safety and security risks of generative artificial intelligence to 2025,.

Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents Safety and security risks of generative artificial intelligence to 2025,

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-16T05:42:36.307400Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Pith citing papers

Observation bca5b16d-1e19-4cbd-8de6-ca1af8db510a · inbound

ATAG: AI-Agent Application Threat Assessment with Attack Graphs cites this paper.

ATAG: AI-Agent Application Threat Assessment with Attack Graphs Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-07T11:18:55.303303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 81654916-8d80-4015-9ae5-5f06c436e780 · inbound

A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents cites this paper.

A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-06T21:34:41.202535Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5b0874b2-7f8d-43a0-b11c-7e937cc8cca1 · inbound

Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms cites this paper.

Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-06T19:12:23.063124Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 248bf087-8004-4536-bd8d-768ccdf781eb · inbound

Agentic Web: Weaving the Next Web with AI Agents cites this paper.

Agentic Web: Weaving the Next Web with AI Agents Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 154

Resolution: unresolved; no resolver link, observed 2026-08-06T13:05:39.660053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bfc0d4a6-7bea-4794-812f-c00bd635b2fd · inbound

BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web cites this paper.

BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 58

Resolution: unresolved; no resolver link, observed 2026-08-05T18:55:33.613439Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7b5d787-e093-4955-ae76-37c50336dc90 · inbound

Security Considerations for Multi-agent Systems cites this paper.

Security Considerations for Multi-agent Systems Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-05-15T14:15:55.138997Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 029ced35-2b0d-48d1-9996-7edff60d2f1e · inbound

Parallax: Why AI Agents That Think Must Never Act cites this paper.

Parallax: Why AI Agents That Think Must Never Act Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 28

Resolution: verified exact; arxiv_id, observed 2026-05-11T11:01:04.888758Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation eae49c7b-05a0-4eb2-bc93-f9a252933be7 · inbound

Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration cites this paper.

Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 52

Resolution: verified exact; arxiv_id, observed 2026-05-09T21:38:30.701939Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 0da86ea3-87f1-4465-976a-40862e20dbb3 · inbound

Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration cites this paper.

Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 51

Resolution: verified exact; arxiv_id, observed 2026-05-19T17:32:41.538736Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation b854337e-0b4d-4f0c-91f6-571cb97bf8e4 · inbound

PYTHALAB-MERA: Validation-Grounded Memory, Retrieval, and Acceptance Control for Frozen-LLM Coding Agents cites this paper.

PYTHALAB-MERA: Validation-Grounded Memory, Retrieval, and Acceptance Control for Frozen-LLM Coding Agents Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 10

Resolution: verified exact; arxiv_id, observed 2026-05-12T08:21:26.071889Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 42fc1481-766e-46b5-b999-9cd53403ed1d · inbound

Security Risks in Tool-Enabled AI Agents: A Systematic Analysis of Privileged Execution Environments cites this paper.

Security Risks in Tool-Enabled AI Agents: A Systematic Analysis of Privileged Execution Environments Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-12T02:46:19.167134Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation f234ebd3-1978-451d-bdf3-1c585585e24f · inbound

The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems cites this paper.

The Misattribution Gap: When Memory Poisoning Looks Like Model Failure in Agentic AI Systems Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 27

Resolution: verified exact; arxiv_id, observed 2026-05-25T00:45:09.295367Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5ce70f4a-2c5a-4623-a4bc-b24366c7a29a · inbound

Security, Privacy, and Ethical Risks in OpenClaw cites this paper.

Security, Privacy, and Ethical Risks in OpenClaw Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:26:37.743104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation ab6b625b-f3c3-4a72-8127-248d482ce7c1 · inbound

Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation cites this paper.

Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 130

Resolution: verified exact; arxiv_id, observed 2026-06-27T13:20:56.759436Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 608bfa06-e51f-41b3-8b28-c329bab7db71 · inbound

The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements cites this paper.

The Containment Gap: How Deployed Agentic AI Frameworks Fail Public-Facing Safety Requirements Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 6

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T13:58:21.501421Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation a9713500-792f-42e3-9dbc-b43522cd42e0 · inbound

Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems cites this paper.

Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-06-30T02:54:10.151992Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 18c21100-5fc1-433b-896b-5d2b3b548701 · inbound

On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models cites this paper.

On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 90

Resolution: unresolved; no resolver link, observed 2026-08-15T14:21:42.322122Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5511faee-4228-44ad-9675-d5451e996a66 · inbound

Rethinking Agent Security as a Networking Problem cites this paper.

Rethinking Agent Security as a Networking Problem Securing Agentic AI: A Comprehensive Threat Model and Mitigation Framework for Generative AI Agents

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-16T00:16:52.504149Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.