{"as_of":"2026-08-10T00:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9ce27fc74b2cebbdbe361dbd32536405d78f3ff85a99c3405aeb83231ffca9ae","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":17,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:50:00.394791Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T09:19:44.179757Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"reference_index":138,"source":"arxiv_source","source_observed_at":"2026-05-12T13:36:57.011451Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2410.02644"},"observation_digest":"sha256:fe0128a87f832d3e5f4795d0fa7a105a5b81c163e0750645b2431a6c5c7a41c8","observation_id":"5524f44e-bfa6-4613-83bb-bc296f7a7bc7","resolution":{"observed_at":"2026-05-12T13:36:57.183215Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-09T00:50:00.394791Z","title":"Available: https://arxiv.org/abs/2406.03007","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-09T05:58:57.244749Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":108,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.394791Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:b2e8d721ceb36fff6a80576ccc208a94a7b79f389da937c301408cdb369bd5ec","observation_id":"97dee002-388f-4f88-b324-2a4dc4ff4fe7","resolution":{"observed_at":"2026-08-09T00:50:00.394791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-08T04:37:28.696356Z","title":"Rlhfpoison: Reward poison- ing attack for reinforcement learning with human feed- back in large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T23:24:16.398221Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-08T04:37:28.696356Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2502.08586"},"observation_digest":"sha256:dfc2e887fed434b0d951cbd310dde800abc6b464635d42da939ecdecea9b79e5","observation_id":"6b8f9803-dfee-4eb5-832e-dde61e6a10e5","resolution":{"observed_at":"2026-08-08T04:37:28.696356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T14:42:37.913404Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.913404Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:dac55c13fa7a3cceb9bfd849c2e416542d11d199355e289656ce258d78a5d244","observation_id":"bfc370ec-1bf4-4463-a693-eefd55a130a9","resolution":{"observed_at":"2026-08-07T14:42:37.913404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T12:48:17.082771Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-10T00:32:44.976355Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:17.082771Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:f1a9a91bb103009ae01dbe64988f2c4b6b105e8f57f4c0722c89b0d46b40153b","observation_id":"06bd2291-f7f5-40c6-b46f-44af44752bf4","resolution":{"observed_at":"2026-08-07T12:48:17.082771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T11:11:40.513409Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents.arXiv preprint arXiv:2406.03007, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-09T00:38:29.639641Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.513409Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:58c39f9bf8cac8739d0134a2395ac725124d57ac5e92b0ef27caa6631198270e","observation_id":"f3f856b1-b0bf-43af-a1cc-44626b5a8be5","resolution":{"observed_at":"2026-08-07T11:11:40.513409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T05:59:33.685730Z","title":"InProceedings of the 2021 Conference on Empirical Methods in Natural Language Processing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-09T03:46:19.090129Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:33.685730Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:3fca207fd8f85cd991708093b72635170b345e9a90601fc4caa918aa49355b7a","observation_id":"29ede7d0-14d3-4b61-9ae0-7f66260913e6","resolution":{"observed_at":"2026-08-07T05:59:33.685730Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T05:20:51.502855Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-09T06:29:12.771905Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T05:20:51.502855Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.08336"},"observation_digest":"sha256:e5679908567825cd46c5cdc1b377bf9ee20edaf739f72bfde7d39c4535afa807","observation_id":"ae5fd4c0-37c0-4e12-80bf-38cfccaf4151","resolution":{"observed_at":"2026-08-07T05:20:51.502855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-06T21:34:44.473874Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:44.473874Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:183cbacac77b468130e6c2a5fa2aca7c5bdb13d87516a8c82f70957132f0020c","observation_id":"e992e2d9-83e4-4241-bf08-5156052f98c2","resolution":{"observed_at":"2026-08-06T21:34:44.473874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-05T20:31:46.488948Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":150,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:46.488948Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:17b003473264339e333cf89f142a4a414b52404dcae5af8918e4beab8ca2e471","observation_id":"97400208-3df6-43f9-a038-98a645929d2a","resolution":{"observed_at":"2026-08-05T20:31:46.488948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-04T21:44:12.414472Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07764","last_updated":"2025-09-09T13:59:00Z","snapshot_observed_at":"2026-08-04T21:44:11.122043Z","submitted_at":"2025-09-09T13:59:00Z","title":"AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T21:44:12.414472Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2509.07764"},"observation_digest":"sha256:d142632b678d397edd9a869f19df56a5e9739bd1fb3e4c052ce3be1d7920438b","observation_id":"904521e1-e999-4249-9ecc-2a389f34a1ba","resolution":{"observed_at":"2026-08-04T21:44:12.414472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-04T13:15:23.930235Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.01157","last_updated":"2026-06-09T20:25:55Z","snapshot_observed_at":"2026-08-08T09:22:36.387389Z","submitted_at":"2025-10-01T17:45:04Z","title":"Where Do Backdoors Live? A Component-Level Analysis of Backdoor Propagation in Speech Language Models","version":4},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-04T13:15:23.930235Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2510.01157"},"observation_digest":"sha256:44c43b455575b119d4fcd9e3ad9aec99ac4553d09cd7c2442b1cd5bc60592cda","observation_id":"ea269435-92dd-4d02-a987-1080d6e1ffae","resolution":{"observed_at":"2026-08-04T13:15:23.930235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-07T15:57:39.809778Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:d738e53027f7b8154a1228197dc59e3d48cb00cd967e4412ad6051f8d93894ae","observation_id":"137fdf27-2b96-465d-81ca-f8c3f4c86f02","resolution":{"observed_at":"2026-05-12T00:01:14.275417Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T18:50:41.401393Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:c3bbea7fc0802a9cc9b99423754d225e5b63094c895d54bcaeb04e864a0b14ee","observation_id":"014ce278-3c88-4b4f-b1bd-bfb1460cffc2","resolution":{"observed_at":"2026-05-09T06:10:41.442412Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.12529","last_updated":"2026-04-15T10:56:08Z","snapshot_observed_at":"2026-08-01T15:54:04.993991Z","submitted_at":"2026-04-15T10:56:08Z","title":"BackFlush: Knowledge-Free Backdoor Detection and Elimination with Watermark Preservation in Large Language Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-14T21:01:10.756844Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.12529"},"observation_digest":"sha256:6ae3e0a1bfa35951fdbc4ae05ecb25de080c32489127ec7183e0e0334d3ca87e","observation_id":"51734d8c-f28d-46b2-a091-8e9d4891a0a1","resolution":{"observed_at":"2026-05-14T21:02:58.926580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2605.19147","last_updated":"2026-05-18T21:56:36Z","snapshot_observed_at":"2026-07-06T23:29:57.003383Z","submitted_at":"2026-05-18T21:56:36Z","title":"Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-20T08:53:52.698758Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2605.19147"},"observation_digest":"sha256:d983220ab17fc46c41828198b56e6942658a5ce297675374c687bb59665c4742","observation_id":"d3200f26-2af8-40e8-baf5-c496fdb9b70b","resolution":{"observed_at":"2026-05-20T08:58:10.439785Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":"2406.03007","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-07-04T09:19:44.179757Z","title":"Badagent: Inserting and acti- vating backdoor attacks in llm agents","venue":null,"work_id":"3f768c74-861b-4568-a875-d1201c8221c0","year":2024},"citing_paper":{"arxiv_id":"2606.22560","last_updated":"2026-06-21T15:36:04Z","snapshot_observed_at":"2026-08-07T11:54:16.926480Z","submitted_at":"2026-06-21T15:36:04Z","title":"Evidence-Bound Gateway-Path Provenance for Third-Party LLM Inference","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T10:07:23.015655Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2606.22560"},"observation_digest":"sha256:6dbb1771ef8899263deabe33c6a3919ed701de3fc196d2574cf8e4f442c1918e","observation_id":"8c905b2a-582f-4155-9af3-246b4e9c698a","resolution":{"observed_at":"2026-07-04T09:19:44.181392Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2406.03007/citation-record","integrity":"/paper/2406.03007/integrity","json":"/paper/2406.03007/citation-record.json","paper":"/paper/2406.03007"},"outbound":[],"paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","latest_version":1,"primary_category":"cs.CL","snapshot_observed_at":"2026-07-06T18:25:44.620682Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 17 inbound Pith citation observations for arXiv:2406.03007."}