Pith. sign in

Paper Citation Record · LEDGER

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents

As of 21 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 1 inbound Pith citation observation for arXiv:2607.24625.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.24625 v1

Coverage vector

measured 55 of 55 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-31T10:25:18.320400Z

measured 56 of 56 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T05:56:02.846369Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-11T05:56:03.000496Z

Reference resolution

55 of 55 outbound references displayed

  • verified exact4
  • verified fuzzy0
  • unresolved48
  • parse uncertain0
  • malformed identifier3
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 736822d7-c69a-44ca-9ea3-805803bb5e7e · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 1

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.536419Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.536419Z digest=sha256:500c2f5a18a5fa36101f188dac5b9254cba1ff2dfcf65bc7f1762d1723d9e9b6

Observation d87beb57-7f71-4980-b6e4-789d7f411574 · outbound

This paper cites 2024.Model Context Protocol (MCP) Specification.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2024.Model Context Protocol (MCP) Specification

Reference 2

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.606476Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.606476Z digest=sha256:6d02a3d30308ad6a3fdc842bb7c93e6279fb467b54c6c13e093ca70e6bccdb2b

Observation 857c00f1-4968-4ca6-844b-88b1788e3d4a · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 3

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.676618Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.676618Z digest=sha256:960f5f6bc65ecb91589d393bd0ded3b89d03357285b4bf876ec921430b7e864b

Observation 2519cf88-6cba-42ae-adde-fd636024b422 · outbound

This paper cites Taylor, Krishnamurthy Dvijotham, and Alexandre Lacoste.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Taylor, Krishnamurthy Dvijotham, and Alexandre Lacoste

Reference 4

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.746548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.746548Z digest=sha256:86dfe93b59f3fd13c6a6abbbd81149cbd49b433d23f0c2ca7fc34b84ef3558f7

Observation 25c40781-4fcc-4f19-a997-3e13f186ce8e · outbound

This paper cites 1967.Lattice Theory(3rd ed.).

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 1967.Lattice Theory(3rd ed.)

Reference 5

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.862930Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.862930Z digest=sha256:425423b2f3ab10370b74e50f7127a9bc89fd3ccd0f9950c26a96ea10da8e0e91

Observation 1e0bfb9d-1b50-4387-ad16-94de1ef3ec59 · outbound

This paper cites Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 6

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.995480Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.995480Z digest=sha256:23bdf3f66c8eb9f646f886e1940185db57811be10dc0e26a123bb4a0613c4752

Observation 8e7fb7b4-c599-4a38-809c-161b018c303c · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 7

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.700292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-07-31T10:25:15.157285Z digest=sha256:531ca4ba5ac57e6a569249e74e73bf59d69bf23506d8182527d7e9e21abe9819

Observation 354b14fb-3376-4666-8858-1a4c320b02e1 · outbound

This paper cites Securing AI Agents with Information-Flow Control.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Securing AI Agents with Information-Flow Control

Reference 8

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.305550Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.305550Z digest=sha256:30aa612a7d1e2d6d6a5f39ea66646df85c1367c7f31b9ab7ae7dcc19135b4c5f

Observation 66f96a41-42e7-4e6f-9463-f66309621e2a · outbound

This paper cites Defeating Prompt Injections by Design.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Defeating Prompt Injections by Design

Reference 9

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.401606Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.401606Z digest=sha256:c241710928bcc3fe1ffb545acae80f2b102fe6eccae1bbfad732ff0496913bee

Observation ed1c6a41-01bc-413f-afda-f1ea1b4c21b3 · outbound

This paper cites AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents

Reference 10

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.498142Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.498142Z digest=sha256:5e450c685ebcfdd3c92475fff1b61bfbc26be977bf27f6eeb3a2b6ebd00aec22

Observation decf9f36-901e-4d08-b6f0-1fda37fdbdc1 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 11

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.718788Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.718788Z digest=sha256:a979e8fb7d2246379ded86b11be12a6b277e83dbcfe8c61e340b071ea3839efa

Observation 2ef4a230-9c7a-42b9-8f3f-8a24eb29acf8 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 12

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.855376Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.855376Z digest=sha256:9c314654335d75b990b86859305a93cbaf88af1fe71a9231488ca05054dfaa97

Observation 72af4b8f-6553-40bf-942e-52e8c9dd0279 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 13

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.032776Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.032776Z digest=sha256:c8c7c913b01d1d20fddaa9b7dac61ffa34d162f01442ab48a920920b1e21f3d8

Observation 2af2e458-1cdf-4e87-b418-3e3052e0dc33 · outbound

This paper cites DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback

Reference 14

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.109445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.109445Z digest=sha256:41e8f09ceefa8c258f27b7b4c32893dce637ee62f4d73840e0fa2073a48d0ffb

Observation fad9a5c7-0d2c-44d0-877b-c75d60c18138 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 15

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.574208Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-07-31T10:25:16.182441Z digest=sha256:f802f1de7b419e8e1754fe637fb4e44b03fcea0bd09572d9dde16a0869e85987

Observation 28744486-3702-4cd5-857e-e4c991e63070 · outbound

This paper cites Goguen and José Meseguer.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Goguen and José Meseguer

Reference 16

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.280411Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.280411Z digest=sha256:b4c387269fb4156adad131e906d40b3048105e21c73816b74bed6812d6b207ab

Observation a5409f0a-e91b-48ee-be08-7ab2f571cdcd · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 17

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.487235Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.487235Z digest=sha256:0439808804e9625dee3f85fc52b6f712f94a5211f5d89fc36922170d9b1e301c

Observation 52fc861f-2bb0-4df9-b160-3412bb430bff · outbound

This paper cites 2026.SMCP: Secure Model Context Protocol.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2026.SMCP: Secure Model Context Protocol

Reference 18

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.568654Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.568654Z digest=sha256:d2deeaaf565c417816c0bdc3bc91aecd3c9fad3d9828fcfb8cc9563b2fbf333c

Observation f641e18b-e95a-476b-b228-103f8655fd41 · outbound

This paper cites Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

Reference 19

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.638678Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.638678Z digest=sha256:134cecd938f10c4a544950b45b0aba54148c385a82bf00339e101c4fd4126352

Observation d1b40f3a-30c9-4ca8-ab6a-d6a53d17688b · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 20

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.690688Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.690688Z digest=sha256:e97d291b53011f67c76109c40099bda54c4829ebefd66bf4677534f02eecafa9

Observation 8cc205a5-3ff6-452b-8f9a-b520c1e717fb · outbound

This paper cites Jensen and William H.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Jensen and William H

Reference 21

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.773463Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.773463Z digest=sha256:44636b30e254357116817f047d7868b325c6a895ff3b4b64e553abd84faf2646

Observation c02938b6-e6fc-4a06-ae25-5c0fe5f89e73 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 22

Resolution
malformed identifier
no resolver link, observed 2026-07-31T10:25:16.846874Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.846874Z digest=sha256:794efab188c4b185981ec82b2a85367815ec3257bd2f7d621040a9e8d99ffb06

Observation 95680ee0-5893-40b4-8973-ef9edf894448 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 23

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.964904Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.964904Z digest=sha256:f03333820e2caadf31f2ff9e1476cc23c9142eeb13defbfb7185155ccec73f44

Observation 6f63ebfe-f1e7-42be-a4dc-bcf9e0783298 · outbound

This paper cites Frans Kaashoek, Eddie Kohler, and Robert Morris.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Frans Kaashoek, Eddie Kohler, and Robert Morris

Reference 24

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.030546Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.030546Z digest=sha256:74b290a0f57103460638984f4b8a75000d418e6785b835ba0dd2a69032c99d92

Observation 22ae7ad4-2b14-42d1-b280-f2d0ef46685d · outbound

This paper cites Gonzalez, Haotong Zhang, and Ion Stoica.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Gonzalez, Haotong Zhang, and Ion Stoica

Reference 25

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.122352Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.122352Z digest=sha256:51c4ad8cafc2cdb17967443717d03edbd22e9dd5cd735b41cebed63b16c2e18d

Observation 0d58e3f1-7a2d-4488-9ca9-5f2407cd6a9b · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 26

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.169218Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.169218Z digest=sha256:c876f3598377bd41642839a96901700fd113139daa5ff71a80bfe176d1137069

Observation 2ddf7dd7-8277-4838-b5b8-1b26295f9315 · outbound

This paper cites ACE: A Security Architecture for LLM-Integrated App Systems.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents ACE: A Security Architecture for LLM-Integrated App Systems

Reference 27

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.207949Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.207949Z digest=sha256:7e6dddf5a3a212b823dfb87ef7d3d6f44f9389e31a2caea428d2f5d740065db2

Observation 08f666c6-bfe2-4240-a834-2977d9093667 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.254331Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.254331Z digest=sha256:a305ae9c0357085d0f69d65754ed318c6d104c30b3c019e0ebcc7abd4aec22e8

Observation b362d773-54be-4fd9-893a-063e69095f3f · outbound

This paper cites 2025.ceLLMate: Sandboxing Browser AI Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2025.ceLLMate: Sandboxing Browser AI Agents

Reference 29

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.288952Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.288952Z digest=sha256:942eebe50f8280234b4e88cb1ac5a123d7d2e1667741cb6769eea945f698a1d5

Observation 4d19128f-4ce6-4f6b-9687-9f6fed825d32 · outbound

This paper cites Miller and Jonathan S.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Miller and Jonathan S

Reference 30

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.421769Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-07-31T10:25:17.330145Z digest=sha256:2aa487bcad280e4516da56bf847a2a866180173e344ca6eda791ce1242c48798

Observation 059b7df6-b078-4cc0-9d10-c51a25cc430a · outbound

This paper cites Myers and Barbara Liskov.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Myers and Barbara Liskov

Reference 31

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.375801Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.375801Z digest=sha256:eb7b5e4bb687ebbf94ca234194bd3d906a693b8f6cc2cad999ca94ca39ad3e8f

Observation 1e9c341d-7432-43d1-9f00-ef50e7c6d732 · outbound

This paper cites Needham and Michael D.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Needham and Michael D

Reference 32

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.419376Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.419376Z digest=sha256:a344054452b6bed4da4239e51af9c568b72d2c77da700fee8ef16d4760713417

Observation e0163d9c-e74d-427c-b1a0-5888fe3acc42 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 33

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.487836Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.487836Z digest=sha256:589aa45890a42257b9fee66866210aa3c3e5b5aa24a6f180ebc610a4071b0123

Observation 2b32f4d1-45de-410c-a7c4-0a4e2cf236c4 · outbound

This paper cites MemLineage: Lineage-Guided Enforcement for LLM Agent Memory.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents MemLineage: Lineage-Guided Enforcement for LLM Agent Memory

Reference 34

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.584642Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.584642Z digest=sha256:309a802bdc1842b23e9a95e2dc5f82418f09714314a51c4feace59bad79dbf67

Observation 3dfb20f2-7298-4ef2-93c2-9fa6001e79a2 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.621097Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.621097Z digest=sha256:73c1b643cbf43a37b4e1d992670ba62e045b6aeca454c2186b8405866d62dbdf

Observation 950b4184-2ff3-41ea-a117-ac371f5e0915 · outbound

This paper cites 2023.NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2023.NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications

Reference 36

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.661479Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.661479Z digest=sha256:2727b89ae455516e2691044bbc54d3f092efbd6412ca6e621c3cf6af84e7cb4b

Observation 710bf588-c76d-427f-a9a9-577a6a553c8e · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 37

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.697081Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.697081Z digest=sha256:75e320208d950b1442b43fb4bfdc5abb127ad57c140548a2acd465e1420134ac

Observation f8e344a7-6e26-4555-834b-453299a767ff · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 38

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.737499Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.737499Z digest=sha256:8b730b2f10b8cb055c296f077ae13c2b6923452f759fab4e691fe363100d7f76

Observation a03d16af-3851-4840-9585-1f95da5567b8 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 39

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.777921Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.777921Z digest=sha256:9d6f201a873dd6255569a307bdb69beaa790909c043d2051f9b05b719c74fb03

Observation 09d9cb12-3ff1-4e53-8147-9890b1ae03d1 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 40

Resolution
malformed identifier
doi_truncated, observed 2026-07-31T10:26:29.216916Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-07-31T10:25:17.818284Z digest=sha256:c05a487731cc91899dd0172c492c80faaddac72199341e679559350a2a94ecb2

Observation 60bc27fc-1824-41ed-a853-bbc65937ec46 · outbound

This paper cites Saltzer and Michael D.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Saltzer and Michael D

Reference 41

Resolution
malformed identifier
no resolver link, observed 2026-07-31T10:25:17.860501Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.860501Z digest=sha256:f5edf50e0476d196d5a268865f255cdec398c9a3d49c826990fb0bbe89e90cb8

Observation 37d58e06-6ded-498b-80f0-153d91feb3f1 · outbound

This paper cites Schwartz, Thanassis Avgerinos, and David Brumley.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Schwartz, Thanassis Avgerinos, and David Brumley

Reference 42

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.036064Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=pdf_text observed=2026-07-31T10:25:17.897367Z digest=sha256:873ea08459cb7ada2d3b98fe71355ff668aaa3dc1beb006976ed934097dcc42f

Observation a032a7b1-7352-4f70-ae67-999c19670fb7 · outbound

This paper cites Mitchell, and David Mazières.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Mitchell, and David Mazières

Reference 43

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.930533Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.930533Z digest=sha256:1ad67a040b41acc2675bdf6482bdf01437ddc6c329227b6ca8f6850140d7b450

Observation 5d9d309e-7cc6-4c0c-afb0-35b896eb6644 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 44

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.965487Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.965487Z digest=sha256:93488a0a1f460fccda2a3ab311b4f64dede6a133d32d3b3a7e0575779a5bc930

Observation 44135f1b-310d-4854-969c-2e9fdf22e45e · outbound

This paper cites AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents

Reference 45

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.009688Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.009688Z digest=sha256:4e0be24d2b4fc547740d6e12ab188ce52eb9f057fef1af6d3cdc52634bcfa687

Observation 15970527-ab3d-4dd9-a3b2-0362adf86b9d · outbound

This paper cites From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents

Reference 46

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.046653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.046653Z digest=sha256:1c3a66b0d8261e380ab5287890ad8315636ba292731e02c89280e873f280f3ff

Observation cd58cb66-8bc1-49f6-ad79-fcee7e7dbf29 · outbound

This paper cites From Agent Loops to Structured Graphs:A Scheduler-Theoretic Framework for LLM Agent Execution.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents From Agent Loops to Structured Graphs:A Scheduler-Theoretic Framework for LLM Agent Execution

Reference 47

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.111860Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.111860Z digest=sha256:2c913f38c7e4c4203eb77d3cc8bd1fc7373c9f990a9803b85b42dcc05e52b59d

Observation 100b7c66-a17a-45a0-8f49-f93b425c24cd · outbound

This paper cites 2023.The Dual LLM Pattern for Building AI Assistants That Can Resist Prompt Injection.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2023.The Dual LLM Pattern for Building AI Assistants That Can Resist Prompt Injection

Reference 48

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.148519Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.148519Z digest=sha256:9b48b270d940021864c64135998c6bac19cd97fea8683ea623316ca3ef158ac1

Observation 8938ffe2-a3c2-48a6-a4f4-3568f54d6e12 · outbound

This paper cites Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes

Reference 49

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.186333Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.186333Z digest=sha256:6717c7b220a1ae7e45c8845936c6e38d7af08869c058d2bce7cdf4dbac347ead

Observation bda3359f-bcdf-41a7-b4e6-93659cba1a58 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 50

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.216641Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.216641Z digest=sha256:54f5fdeaa4a7c82ca029565c10841294213f089d3e751a5c0ac81d089860bfc1

Observation 9045eab2-1096-4284-b0d3-6e6456a918d4 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 51

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.255814Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.255814Z digest=sha256:a7bfccf9e3fb7bda5c967000690f5d3aff3e3ecb50728db828a4c6fb0ac79bba

Observation 9dad7a4f-d1a1-4aa2-88db-76d8328dd82d · outbound

This paper cites SGLang: Efficient Execution of Structured Language Model Programs.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents SGLang: Efficient Execution of Structured Language Model Programs

Reference 52

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.288712Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.288712Z digest=sha256:c2729e994c17ae93cdc1abf2a804b71dd73e59370894cc265a75f003c90eafe8

Observation 5a18b45f-6601-4a1f-acfe-af4cdcd02b96 · outbound

This paper cites send the routine email: to all@northwind. example, subject ‘Routine update’, body ‘The scheduled corporate update is complete. ’.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents send the routine email: to all@northwind. example, subject ‘Routine update’, body ‘The scheduled corporate update is complete. ’

Reference 53

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.320400Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.320400Z digest=sha256:f219cf2f79a74f4c058d5e6752e8be7527587894df793970a615fd5e70ca6e09

Observation f362ef25-5060-46a4-9ae9-448abaffc082 · outbound

This paper cites InFindings of the Association for Computational Linguistics: ACL 2024.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents InFindings of the Association for Computational Linguistics: ACL 2024

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.779954Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.779954Z digest=sha256:91313ca1413f199b6a176d77e1d2b7bdb5fe90a82dccafe9977baeacda1fcc4c

Observation 75e33d6b-9bc4-4e1e-a2db-bcd93aeca6dd · outbound

This paper cites Tracking Capabilities for Safer Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Tracking Capabilities for Safer Agents

Reference 2026

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.555138Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.555138Z digest=sha256:a257ce8e513b66e191b15611e3a35889a4fdf70b0668eff10d7aed37f6648dbf

Pith citing papers

Observation d2cbe207-0591-4469-8827-3455c6f9ad2d · inbound

Multi-Agent AI Safety as an Institutional Design Problem cites this paper.

Multi-Agent AI Safety as an Institutional Design Problem Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents

Reference 18

Resolution
verified exact
local_arxiv, observed 2026-08-11T05:56:03.004575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

source=arxiv_source observed=2026-08-11T05:56:02.846369Z digest=sha256:825774a2124a5408e93b428049f361d9bc5ffc6925abf81133a5f8cb8bc922cf