{"as_of":"2026-08-09T22:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4603243db8fd6e6654762641ea734487b749725a0a6b9d9c3db63ed2790e56a7","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":25,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T04:27:01.787579Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":3,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-05-15T19:32:19.405615Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2410.07283"},"observation_digest":"sha256:1a3987fdeb479ee1aa6c726b19487003d8bf37724132b14d0f8e45aec27b0c89","observation_id":"749da24c-4631-4919-8f2f-da7e06478549","resolution":{"observed_at":"2026-05-15T19:32:19.545024Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-05-15T19:32:19.405615Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2410.07283"},"observation_digest":"sha256:f292147bca50a13613f7552794e61ada2992eb5099732f560b84bfee9f977883","observation_id":"71d38dcd-a6ce-4301-b874-1b9f1429e270","resolution":{"observed_at":"2026-05-15T19:32:19.680643Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2412.14855","last_updated":"2026-05-05T08:22:20Z","snapshot_observed_at":"2026-08-04T14:09:37.671671Z","submitted_at":"2024-12-19T13:50:26Z","title":"Position: Mind the Gap-AI Security and the Limits of Current Reporting Standards","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-23T07:23:14.666984Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2412.14855"},"observation_digest":"sha256:1fc747a9ba4dffcc05718c23951c7df61fcb2ffdb50d1904f792fe86bf0fd97b","observation_id":"bb9ff2e9-55b9-4e52-8545-df3da8b39d7a","resolution":{"observed_at":"2026-05-23T07:25:28.605256Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-09T04:27:01.787579Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2503.04742","last_updated":"2025-08-21T08:41:55Z","snapshot_observed_at":"2026-08-09T15:53:13.161097Z","submitted_at":"2025-02-05T20:38:18Z","title":"A Case for Specialisation in Non-Human Entities","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-09T04:27:01.787579Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2503.04742"},"observation_digest":"sha256:39ccbd195c375fa0115adc6f672080de449f6144688deaa81a252ad2e8b1ffad","observation_id":"a03be374-4d56-41fb-a92a-392c3ac0da38","resolution":{"observed_at":"2026-08-09T04:27:01.787579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-07T14:27:03.426864Z","title":"Here comes the ai worm: Unleashing zero-click worms that target genai-powered applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18889","last_updated":"2025-08-24T03:15:13Z","snapshot_observed_at":"2026-08-08T20:47:09.765405Z","submitted_at":"2025-05-24T22:22:43Z","title":"Security Concerns for Large Language Models: A Survey","version":5},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:27:03.426864Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2505.18889"},"observation_digest":"sha256:38293659c76a2e0433dc9b9ad9d5e38248ed1f571aadc498887afe748f082e8b","observation_id":"95ad58b2-1d5a-4c5a-8193-bf587a9eb541","resolution":{"observed_at":"2026-08-07T14:27:03.426864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-07T12:42:12.078265Z","title":"Here comes the ai worm: Unleashing zero-click worms that target genai-powered applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.24019","last_updated":"2025-05-29T21:39:08Z","snapshot_observed_at":"2026-08-07T20:58:14.169872Z","submitted_at":"2025-05-29T21:39:08Z","title":"LLM Agents Should Employ Security Principles","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:42:12.078265Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2505.24019"},"observation_digest":"sha256:3be774b57124d91c4dcb4275a905fdeed7053ca032c170d8cddd51300ea29d9b","observation_id":"2892f98d-6ca6-4c1c-a487-fc9581d063d9","resolution":{"observed_at":"2026-08-07T12:42:12.078265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-06T17:50:28.637643Z","title":"Here Comes The AI Worm : Unleashing Zero -click Worms that Target GenAI - Powered Applications , January 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.09801","last_updated":"2025-07-13T21:32:15Z","snapshot_observed_at":"2026-08-07T20:59:39.266507Z","submitted_at":"2025-07-13T21:32:15Z","title":"Technical Requirements for Halting Dangerous AI Activities","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-06T17:50:28.637643Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2507.09801"},"observation_digest":"sha256:ae403e629263f7e935c27309ecf7f3b3ad3642fa239f4b289df702ae46dbd040","observation_id":"8a8b844a-3f96-43e6-b8d0-38921c2b7daf","resolution":{"observed_at":"2026-08-06T17:50:28.637643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-06T16:34:05.379319Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.13169","last_updated":"2025-07-17T14:33:36Z","snapshot_observed_at":"2026-08-07T22:34:49.318621Z","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:34:05.379319Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2507.13169"},"observation_digest":"sha256:daa90ff4f4fb5587cd0e9232fef8d1456a9fd2be3ab2d581098756f873ef44ea","observation_id":"4a6efbb7-8971-44ae-aabf-67ad24ecb2ae","resolution":{"observed_at":"2026-08-06T16:34:05.379319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T05:09:39.782564Z","title":"Here comes the ai worm: Unleashing zero-click worms that target genai-powered applications.arXiv preprint arXiv:2403.02817, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05755","last_updated":"2026-06-28T05:20:23Z","snapshot_observed_at":"2026-08-06T21:30:43.649885Z","submitted_at":"2025-09-06T15:48:49Z","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","version":6},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T05:09:39.782564Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2509.05755"},"observation_digest":"sha256:8a97d4b7ebe6049dd6553a2408ded625538f2128de61a459be9b463c9e04a67a","observation_id":"c9179a97-7fa6-44f1-8062-1426bbf4cf12","resolution":{"observed_at":"2026-08-05T05:09:39.782564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:b09daecb3ce91eb2e8f9276bcc8cb7a8313189b1feeb4220724aa01e48739a56","observation_id":"3f6a27db-28b1-48b8-8fb5-465e2727e112","resolution":{"observed_at":"2026-05-18T03:42:21.946479Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2604.21131","last_updated":"2026-04-22T22:40:31Z","snapshot_observed_at":"2026-07-06T23:07:47.244208Z","submitted_at":"2026-04-22T22:40:31Z","title":"Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-09T23:44:44.036643Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2604.21131"},"observation_digest":"sha256:0094f30aac262dc3c55d65d019b074898d9fca03112f9302e14d65225a21323c","observation_id":"653bbe2f-cdcd-46aa-a1dc-a7246350d5ac","resolution":{"observed_at":"2026-05-11T14:01:06.540431Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T15:39:32.595169Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:65aa714f69ae44adbdf8868d24e00c84dfc4c9f5e37d7e7869fa619c8be2c869","observation_id":"04c436fc-d26d-4dec-92ea-d1379fc81a96","resolution":{"observed_at":"2026-05-11T10:06:02.732791Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-11T01:46:54.430546Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:1d0328473dd4a3e733953d86f0ff0bac5a124c7fd7159bf7f7e86f076b13d1d4","observation_id":"91aa8fa6-6d59-42fc-a4dd-d22759a8b0ed","resolution":{"observed_at":"2026-05-11T04:20:58.058599Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.02812","last_updated":"2026-05-04T16:49:29Z","snapshot_observed_at":"2026-08-02T05:54:54.847027Z","submitted_at":"2026-05-04T16:49:29Z","title":"Autonomous LLM Agent Worms: Cross-Platform Propagation, Automated Discovery and Temporal Re-Entry Defense","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T18:31:11.314497Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.02812"},"observation_digest":"sha256:f3067b4d5df2513eb518013fe51cefb6cc84c7231ae95d1e93a119f30da80ea0","observation_id":"5de68ffb-33f5-4114-86fe-ea5937adc49d","resolution":{"observed_at":"2026-05-09T06:20:43.257306Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.16746","last_updated":"2026-05-16T01:55:06Z","snapshot_observed_at":"2026-08-01T21:48:29.876394Z","submitted_at":"2026-05-16T01:55:06Z","title":"State Contamination in Memory-Augmented LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-19T21:28:00.370745Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.16746"},"observation_digest":"sha256:09be8d8f2fb32ce44e8d72473d6a44e095760df89ffb160e98744bf8978b7abf","observation_id":"46b0862f-9e80-42a4-829e-12c2eafbf425","resolution":{"observed_at":"2026-05-19T21:32:48.000943Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.17034","last_updated":"2026-05-31T12:30:31Z","snapshot_observed_at":"2026-08-02T05:43:36.249122Z","submitted_at":"2026-05-16T15:08:31Z","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-19T20:27:25.871875Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.17034"},"observation_digest":"sha256:331060c967634061efbc7260e178d145178b7dd63d52c60a53d70e77f7c1fea3","observation_id":"6ce76adc-70e4-4a75-bfd7-6279eeeee6a6","resolution":{"observed_at":"2026-05-19T20:27:48.572292Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.17034","last_updated":"2026-05-31T12:30:31Z","snapshot_observed_at":"2026-08-02T05:43:36.249122Z","submitted_at":"2026-05-16T15:08:31Z","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-30T19:08:11.737229Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.17034"},"observation_digest":"sha256:251242d013f803c349d27be51136718eb7d66ebd3b70702d6d53f872fc08d3ba","observation_id":"f8841e04-fb86-4241-9b78-742e0ece4cef","resolution":{"observed_at":"2026-06-30T19:15:00.894254Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.23330","last_updated":"2026-05-22T07:45:04Z","snapshot_observed_at":"2026-08-02T05:47:41.731065Z","submitted_at":"2026-05-22T07:45:04Z","title":"Security, Privacy, and Ethical Risks in OpenClaw","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-25T04:25:49.102385Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.23330"},"observation_digest":"sha256:2639dfe7977c23f8a035170f2b42e5214935db3c9d623c1c44663812f47150d7","observation_id":"489915d3-91b8-4bee-ab49-0d0f63f3d78f","resolution":{"observed_at":"2026-05-25T04:26:37.706148Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2605.23989","last_updated":"2026-05-17T10:26:37Z","snapshot_observed_at":"2026-07-06T23:34:08.786038Z","submitted_at":"2026-05-17T10:26:37Z","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","version":1},"reference_index":214,"source":"pdf_text","source_observed_at":"2026-06-30T19:18:40.244556Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2605.23989"},"observation_digest":"sha256:d94c03e766bb257269eda3e902bc5858ebc73033d838074ab988994400699dd2","observation_id":"3325edc0-15af-46c9-9348-2689fd238445","resolution":{"observed_at":"2026-06-30T19:45:01.583945Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2606.22528","last_updated":"2026-06-27T08:35:20Z","snapshot_observed_at":"2026-08-07T02:44:31.363977Z","submitted_at":"2026-06-21T14:30:20Z","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-26T10:45:36.408818Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2606.22528"},"observation_digest":"sha256:d377293720283b0763e510aa0347e64726a26004e39cc86ecf8d9268087cb7e4","observation_id":"020c2af0-1fbe-4060-a965-ac67c49da560","resolution":{"observed_at":"2026-07-04T08:59:42.373969Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2606.22528","last_updated":"2026-06-27T08:35:20Z","snapshot_observed_at":"2026-08-07T02:44:31.363977Z","submitted_at":"2026-06-21T14:30:20Z","title":"Governance Decay: How Context Compaction Silently Erases Safety Constraints in Long-Horizon LLM Agents","version":2},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-30T10:42:48.496613Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2606.22528"},"observation_digest":"sha256:2c433536e7f94a03abfc85e4b635c02cb46eb724a2c8827abcc71519327a2083","observation_id":"67723974-063c-4751-afd3-d9243681735e","resolution":{"observed_at":"2026-06-30T10:44:36.388624Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":"2403.02817","doi":"10.48550/arxiv.2403.02817","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cohen, R","venue":"arXiv (Cornell University)","work_id":"a38e9b57-de5b-4c3f-adf0-ac1781fadc67","year":2024},"citing_paper":{"arxiv_id":"2606.23075","last_updated":"2026-06-22T09:23:50Z","snapshot_observed_at":"2026-08-02T06:16:18.387353Z","submitted_at":"2026-06-22T09:23:50Z","title":"Safety in Self-Evolving LLM Agent Systems: Threats, Amplification, and Case Studies","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-26T08:11:30.091859Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2606.23075"},"observation_digest":"sha256:693b2cd68800f725c96425792c4b4affaa1349b60014a739872de86212cd039a","observation_id":"43dc342e-c34a-401b-8df3-d24652770f2f","resolution":{"observed_at":"2026-07-04T10:59:47.099570Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:34.100435+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-07-15T08:35:47.870083Z","title":"Here Comes The AI Worm: Unleashing Zero -click Worms that Target GenAI -Powered Applications,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11999","last_updated":"2026-07-15T02:43:14Z","snapshot_observed_at":"2026-08-02T23:32:24.396963Z","submitted_at":"2026-07-13T17:48:25Z","title":"Underwriting the Agent Economy: The Blueprint for an AI Insurance Stack","version":1},"reference_index":215,"source":"pdf_text","source_observed_at":"2026-07-15T08:35:47.870083Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2607.11999"},"observation_digest":"sha256:a8cfa8e055dd1f5942234d39fd5e9299d7189373b68c94bd9c8c4772665252bd","observation_id":"4e570522-8e2c-44ef-a7db-6839e71ab1b5","resolution":{"observed_at":"2026-07-15T08:35:47.870083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-02T06:46:38.364755Z","title":"Here Comes The AI Worm: Unleashing Zero -click Worms that Target GenAI -Powered Applications,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11999","last_updated":"2026-07-15T02:43:14Z","snapshot_observed_at":"2026-08-02T23:32:24.396963Z","submitted_at":"2026-07-13T17:48:25Z","title":"Underwriting the Agent Economy: The Blueprint for an AI Insurance Stack","version":2},"reference_index":216,"source":"pdf_text","source_observed_at":"2026-08-02T06:46:38.364755Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2607.11999"},"observation_digest":"sha256:de8224985919777ec63c01bdccfce2555c7c1b190985870b3e165481b80a8b13","observation_id":"7ed592f1-68d1-4c2a-8013-c84b7d23a062","resolution":{"observed_at":"2026-08-02T06:46:38.364755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-07T00:12:23.578617Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T13:07:35.210909Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.578617Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:dddabbe5281b8833121fea20ce134fc1e99674628755d9cc6228b4eac46be8c3","observation_id":"a7a7e11a-186f-4033-a1fb-0de4a6ce2a25","resolution":{"observed_at":"2026-08-07T00:12:23.578617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2403.02817/citation-record","integrity":"/paper/2403.02817/integrity","json":"/paper/2403.02817/citation-record.json","paper":"/paper/2403.02817"},"outbound":[],"paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 25 inbound Pith citation observations for arXiv:2403.02817."}