Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-01T16:32:04.109230Z
Paper Citation Record · LEDGER
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?
As of 23 August 2026, this Paper Citation Record lists 65 of 65 outbound references and 0 inbound Pith citation observations for arXiv:2607.17986.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-23T06:30:58.430688+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
Reference resolution
65 of 65 outbound references displayed
- verified exact0
- verified fuzzy0
- unresolved63
- parse uncertain0
- malformed identifier2
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation e6cb5c50-b16b-48b8-89af-951a10dd4b8b · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 1
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:00.895313Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8d3b262c-d70b-4919-a326-b2a020d98a07 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 2
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:00.988558Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 79b82e57-77e5-4fb6-9909-896e996552b5 · outbound
This paper cites Zico Kolter, Matt Fredrikson, Yarin Gal, and Xander Davies.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Zico Kolter, Matt Fredrikson, Yarin Gal, and Xander Davies
Reference 3
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.114694Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 07fbdf09-068c-4f2a-8fed-ee335eec3a2f · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 4
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.248422Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a9977033-c27f-48fb-a3da-edf6af70b633 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 5
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.315741Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e41ca7da-95ce-415d-92a7-840dec5b3bd4 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 6
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.443980Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f3a5826f-1351-468d-8ad2-dbb91a2a0111 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 7
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.697841Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 170fc142-503e-4225-a15a-44423eeb8732 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 8
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.800808Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 94cef1f1-455c-4609-90da-73402f917a60 · outbound
This paper cites Securing AI Agents with Information-Flow Control.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Securing AI Agents with Information-Flow Control
Reference 9
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:01.882739Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0cff2b97-5378-452d-98d4-f0742d2f2740 · outbound
This paper cites Defeating Prompt Injections by Design.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Defeating Prompt Injections by Design
Reference 10
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:02.078051Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4ef197fb-c10c-46ea-a1fa-5104f85e01da · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 11
- Resolution
- malformed identifier
- no resolver link, observed 2026-08-01T16:32:02.248553Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 07db1806-b3d9-49f8-9d33-0675cd9f245b · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 12
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:02.370507Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3087842c-485d-49bb-9417-0d8ec81e78c1 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 13
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:02.513490Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation eac6395b-4992-42d6-a756-9675dbc7db1b · outbound
This paper cites WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
Reference 14
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:02.658543Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7c227af0-a04d-4707-97c5-a99dee77d92c · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 15
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:02.814537Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f9cf887b-5c83-4c51-bf42-f71a913a3242 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 16
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:02.962794Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3f41fadb-580d-47b8-a71d-064ee5fde3e7 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 17
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.025067Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 42a33a3b-5462-4648-9cc7-d2cdcfe441ef · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 18
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.069797Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 11ef57d7-992e-4929-8f52-6e5cb070f000 · outbound
This paper cites Javitz and Alfonso Valdes.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Javitz and Alfonso Valdes
Reference 19
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.135588Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4c07f36d-495b-4cb3-84fe-e66424a298b9 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 20
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.216025Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ce80b241-d862-4c60-8727-d2daa4811b69 · outbound
This paper cites Kim and Eugene H.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Kim and Eugene H
Reference 21
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.328133Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f9cc4d59-1e71-4829-a438-769a55b1fa57 · outbound
This paper cites Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents
Reference 22
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.401887Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c4d07ab2-852a-4669-b11e-a22fc15e1bca · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 23
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.474217Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ef741cd4-e4e7-4e26-bfe3-bbead7d97f8c · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 24
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.580099Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation eeda7952-86c6-4e1e-b161-1dc868c6658a · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 25
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.643447Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 33e29120-e667-457e-a100-a7586ad359d1 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 26
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.759055Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9c4489b4-0c38-438b-98a1-fea93a6b2033 · outbound
This paper cites Energy-based Out-of-distribution Detection.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Energy-based Out-of-distribution Detection
Reference 27
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.814842Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 84362197-6ec5-4b1c-8b97-8647038d8646 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 28
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.872294Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 504ff778-9074-4a99-ad76-44c4719cc3a9 · outbound
This paper cites "Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? "Your AI, My Shell": Demystifying Prompt Injection Attacks on Agentic AI Coding Editors
Reference 29
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.926994Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d45ca0a3-46da-4a0a-99df-65168967fc8a · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 30
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.966039Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 72171527-a74d-470e-a86b-f83c182538cc · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 31
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.970855Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8bc565a2-66cf-48b2-bb71-2957d3451cc5 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 32
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.974957Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation df6bc5ae-90ae-4974-896c-120b224815f2 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 33
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.978754Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f67e1078-752e-4b09-b63b-0af1321e791e · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 34
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.983414Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bbe0a307-98b0-4759-8000-43f5aa999ad2 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 35
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.987233Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation dadfb904-6857-4d75-b7ec-ab1d04680191 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 36
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.991255Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e7d30231-86b5-4e31-862e-c375e6a4a27e · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 37
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.995312Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7e6795c0-ff15-4a31-8e72-2df749f14b48 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 38
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.999121Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 834deaaa-d717-4728-8189-cbb077a9367f · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 39
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.003955Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3bfbfcb4-d053-4cc4-b692-0a084af6cbf8 · outbound
This paper cites ConfusedPilot: Confused Deputy Risks in RAG-based LLMs.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? ConfusedPilot: Confused Deputy Risks in RAG-based LLMs
Reference 40
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.007867Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d43e54c0-7501-488c-b6c3-6d131dc7fef5 · outbound
This paper cites Maddison, and Tatsunori Hashimoto.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Maddison, and Tatsunori Hashimoto
Reference 41
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.012434Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3bcb4dd8-e766-4dc6-89ab-2d2526b97212 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 42
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.016780Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0724d02b-4a0e-4f27-802d-639dc67c165f · outbound
This paper cites Progent: Securing AI Agents with Privilege Control.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Progent: Securing AI Agents with Privilege Control
Reference 43
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.020948Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f0af26f2-939a-49d0-8250-6796fb0ae11d · outbound
This paper cites Stolfo, Shlomo Hershkop, Linh H.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Stolfo, Shlomo Hershkop, Linh H
Reference 44
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.025591Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c4d01513-b9a9-463c-860c-cfa886c8d5b0 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 45
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.034319Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a3fb36d5-9d0d-4be9-8359-e1b15da9d9f9 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 46
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.038720Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 20b17c00-8ad4-4381-bd20-3ac465f49f0b · outbound
This paper cites AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents
Reference 47
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.042533Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 855df053-69cd-4a8b-b7fa-13c1afb56d2e · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 48
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.047191Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 45414c67-e08b-4a68-bdaa-2b1d39fce2bb · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 49
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.052582Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3651d0ce-b779-4e99-b789-80f79302127f · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 50
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.056710Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 913dc9ff-7860-4fa5-a1dc-bc602e374295 · outbound
This paper cites GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning
Reference 51
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.064947Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f1adf533-abe5-410d-8663-ce4b2ffeff68 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 52
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.069242Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4dff244c-1af9-4973-a8a9-0ae4acff1d7a · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 53
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.073271Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a6820855-f402-40c3-82a3-64f974243bd4 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 54
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.077412Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f9f687c4-3adb-4114-a437-3113bdb75a5e · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 55
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.081341Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 83aa7598-ad8d-47c4-ae1c-bafa577cb77b · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 56
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.089378Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aaf8b5b4-0d15-4981-a825-f1342f6301ed · outbound
This paper cites Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents
Reference 57
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.097021Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c691f9a4-281f-47c1-9f44-290f1cdc0967 · outbound
This paper cites Xing, Hao Zhang, Joseph E.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Xing, Hao Zhang, Joseph E
Reference 58
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.101212Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 87155e9c-fc70-4b35-92b3-e220c1eaad19 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 59
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.105418Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e5d82d27-342f-4d41-99b8-e5dbfc859cf8 · outbound
This paper cites set channels.telegram.enabledto false.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? set channels.telegram.enabledto false
Reference 60
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.109230Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 092b5d1f-237d-4ba6-99d0-8dc79be90781 · outbound
This paper cites InInternational Symposium on Methodologies for Intelligent Sys- tems (ISMIS) (Lecture Notes in Computer Science 3488).
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? InInternational Symposium on Methodologies for Intelligent Sys- tems (ISMIS) (Lecture Notes in Computer Science 3488)
Reference 2005
- Resolution
- malformed identifier
- doi_truncated, observed 2026-08-01T16:33:29.305516Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.
Observation 4a8237bd-8735-4b0c-b457-151ac0713918 · outbound
This paper cites doi:10.18653/v1/2024.findings-acl.624.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? doi:10.18653/v1/2024.findings-acl.624
Reference 2024
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.093178Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0ec8be4d-ff86-4468-8d02-f2d0c6e8eee1 · outbound
This paper cites IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems
Reference 2025
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.060879Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation e017a67b-e86d-4292-b60f-5893b76d9516 · outbound
This paper cites an unresolved cited work.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? Unresolved cited work
Reference 7132
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:04.085433Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a964b6a1-09d3-43d0-980f-19510e3b45cf · outbound
This paper cites A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks.
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go? A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks
Reference 7177
- Resolution
- unresolved
- no resolver link, observed 2026-08-01T16:32:03.702310Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Pith citing papers
No inbound Pith citation observations are available.