{"as_of":"2026-08-09T06:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3fe940f1abda2432e7b6429668d19d8c6da2780e9a57fbfe5f96035c8c850e99","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":28,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T20:06:58.339855Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T20:10:08.744897Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-07-06T20:09:28.763595Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:213194bf8e8f67029bfde769acc1b4381eb30ab7d7c30596361dd237cd6d1d98","observation_id":"b8dbeb6e-cbc1-4864-97ce-2a9f5602ec25","resolution":{"observed_at":"2026-05-23T06:42:39.719311Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-08T20:06:58.339855Z","title":"H., Koh, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-08-08T19:58:38.598603Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-08T20:06:58.339855Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2502.05174"},"observation_digest":"sha256:c19407bff69f50b9da7b7d968791a99d46aca6e5724a4792481d140a6efa453c","observation_id":"6a90feb9-8f8c-46df-9d07-11fed6300970","resolution":{"observed_at":"2026-08-08T20:06:58.339855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2503.21460","last_updated":"2025-03-27T12:50:17Z","snapshot_observed_at":"2026-07-06T20:59:35.694800Z","submitted_at":"2025-03-27T12:50:17Z","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","version":1},"reference_index":179,"source":"pdf_text","source_observed_at":"2026-05-22T21:51:34.309870Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2503.21460"},"observation_digest":"sha256:1a111a7ad8af086bcc844cefa5871814ef99d31dd323f19c8d6b5d141de52c9c","observation_id":"689c8c67-45ec-4237-af03-327fe82e8ec4","resolution":{"observed_at":"2026-05-22T21:52:10.630199Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T15:04:00.833689Z","title":"Dissecting adversarial robustness of multimodal lm agents, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16640","last_updated":"2025-05-22T13:12:46Z","snapshot_observed_at":"2026-08-07T14:55:29.164249Z","submitted_at":"2025-05-22T13:12:46Z","title":"BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:04:00.833689Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2505.16640"},"observation_digest":"sha256:b4163ce899aade086875a991e6337fe4888722aafd2c877f7378c7239069e9e6","observation_id":"d82ac1d1-7e89-4d3d-98e7-8fdd42d13fa1","resolution":{"observed_at":"2026-08-07T15:04:00.833689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T12:06:27.049458Z","title":"Dissecting adversarial robustness of multimodal LM agents, December 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00618","last_updated":"2025-06-20T01:24:06Z","snapshot_observed_at":"2026-08-07T11:59:19.422617Z","submitted_at":"2025-05-31T16:04:59Z","title":"RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:06:27.049458Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.00618"},"observation_digest":"sha256:e324d237e188e7bc654ec7d4e8f79cc7ee39daa9738250ddea734d5b78bc3dab","observation_id":"fa21ad3d-c8e7-40f9-ab5c-b12894695053","resolution":{"observed_at":"2026-08-07T12:06:27.049458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T11:11:40.509846Z","title":"Adversarial attacks on multimodal agents.arXiv preprint arXiv:2406.12814, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.03350","last_updated":"2025-06-03T19:43:58Z","snapshot_observed_at":"2026-08-09T00:38:29.639641Z","submitted_at":"2025-06-03T19:43:58Z","title":"Adversarial Attacks on Robotic Vision Language Action Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T11:11:40.509846Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.03350"},"observation_digest":"sha256:ec16a57b249df444c1a746bb11e628e45aeb3586a6eea51a99624a72996feb46","observation_id":"98b16650-4cd2-4544-817b-1fc5a857bd5b","resolution":{"observed_at":"2026-08-07T11:11:40.509846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-07T05:36:34.161342Z","title":"Dissecting adversarial robustness of multimodal lm agents, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07564","last_updated":"2025-06-11T03:14:10Z","snapshot_observed_at":"2026-08-08T13:02:06.235147Z","submitted_at":"2025-06-09T09:04:37Z","title":"SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems","version":3},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T05:36:34.161342Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.07564"},"observation_digest":"sha256:c882e32a0c0fc04e564012ba862d65d659751f71fe04075043faa8764b337611","observation_id":"ae5ad172-0a59-4604-b2fd-f62ea0cd1d83","resolution":{"observed_at":"2026-08-07T05:36:34.161342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-06T23:59:58.834733Z","title":"H., Koh, J","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.17318","last_updated":"2025-06-18T14:29:02Z","snapshot_observed_at":"2026-08-06T23:52:05.545407Z","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T23:59:58.834733Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.17318"},"observation_digest":"sha256:44b66a41a12cbf47961ea70ccb5872272bd6a6a6566c64018c4ae6c4f6a83bda","observation_id":"8d6ba60c-0766-45ab-b2ca-771efd58fc12","resolution":{"observed_at":"2026-08-06T23:59:58.834733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-06T21:34:45.215087Z","title":"Dissecting adversarial robustness of multi- modal lm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":159,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.215087Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:3b48892a0463cd4850e295293b3c620fc75d76516bf7a867204deed17779c0ab","observation_id":"737e810b-8e18-4e26-9623-dae33871944a","resolution":{"observed_at":"2026-08-06T21:34:45.215087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2507.04227","last_updated":"2026-04-14T14:47:25Z","snapshot_observed_at":"2026-08-01T14:12:08.736574Z","submitted_at":"2025-07-06T03:31:36Z","title":"Mobile GUI Agents under Real-world Threats: Are We There Yet?","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-19T06:57:25.257775Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2507.04227"},"observation_digest":"sha256:5b535844b00f815b65875d0d5a463b87e40c9f2a0d34b331195b4622b18d820c","observation_id":"566efa2c-d778-4f1f-acee-fc8d8a02d244","resolution":{"observed_at":"2026-05-19T07:02:07.950558Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-06T13:05:40.408089Z","title":"Dissecting adversarial robustness of multimodal lm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21206","last_updated":"2025-07-28T17:58:12Z","snapshot_observed_at":"2026-08-08T10:48:52.442522Z","submitted_at":"2025-07-28T17:58:12Z","title":"Agentic Web: Weaving the Next Web with AI Agents","version":1},"reference_index":231,"source":"arxiv_source","source_observed_at":"2026-08-06T13:05:40.408089Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2507.21206"},"observation_digest":"sha256:0d9c11efe465ef1a50b4b15abf01171c649a8b94e577b1661999241531856c7c","observation_id":"f1e9cc5d-c2d2-4566-b773-b5481b9c4de5","resolution":{"observed_at":"2026-08-06T13:05:40.408089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-06T11:54:42.996988Z","title":"”Adversarial Attacks on Multimodal Agents” arXiv preprint arXiv:2406.12814 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22304","last_updated":"2025-07-30T00:34:20Z","snapshot_observed_at":"2026-08-07T22:27:04.322645Z","submitted_at":"2025-07-30T00:34:20Z","title":"Invisible Injections: Exploiting Vision-Language Models Through Steganographic Prompt Embedding","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T11:54:42.996988Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2507.22304"},"observation_digest":"sha256:3ba0b02d301d41bd1f62fb89dcd69e948bfc005f1cd7420c5ad1dfc1dfb414b4","observation_id":"b75b21fd-8389-42fd-906e-28d015261e01","resolution":{"observed_at":"2026-08-06T11:54:42.996988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:c44836a5280f86ece2bedc1d8f8c8eea86829bdb89ccc6367396bb6fe1651d46","observation_id":"28cbc1a3-928e-47b7-bc07-04b11f62ca86","resolution":{"observed_at":"2026-05-18T03:42:22.166261Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-04T07:06:38.127507Z","title":"Dissecting ad- versarial robustness of multimodal lm agents.arXiv preprint arXiv:2406.12814, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2510.27140","last_updated":"2026-07-07T02:18:26Z","snapshot_observed_at":"2026-08-07T23:25:01.868478Z","submitted_at":"2025-10-31T03:35:59Z","title":"Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels","version":3},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-04T07:06:38.127507Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2510.27140"},"observation_digest":"sha256:9a9b6d1d9d8fac2ab4bc65f6cd14646452a6a146f6558505f21b9f32addf6e23","observation_id":"848eac8b-7613-413b-bd90-4e51f175d1f7","resolution":{"observed_at":"2026-08-04T07:06:38.127507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2604.16966","last_updated":"2026-04-18T11:15:37Z","snapshot_observed_at":"2026-07-15T23:17:44.749638Z","submitted_at":"2026-04-18T11:15:37Z","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T06:30:53.536024Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2604.16966"},"observation_digest":"sha256:7e1af061298448f24bf4516a9649eaa5d143a7b368943a24a1160a9a18038aec","observation_id":"6243da35-4ead-415e-9858-79ac81b9738d","resolution":{"observed_at":"2026-05-10T06:31:30.390640Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2604.18874","last_updated":"2026-04-20T21:53:39Z","snapshot_observed_at":"2026-07-06T23:05:39.724237Z","submitted_at":"2026-04-20T21:53:39Z","title":"How Adversarial Environments Mislead Agentic AI?","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-05-10T04:04:41.152756Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2604.18874"},"observation_digest":"sha256:e16ff276ea0a7e4bee2c66a0c55ae0f9e6bea3be505adc0284c415e90900f29d","observation_id":"705ddb26-b19e-468f-aa06-f8e4d79071df","resolution":{"observed_at":"2026-05-11T12:11:07.686453Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2604.20704","last_updated":"2026-04-22T15:46:11Z","snapshot_observed_at":"2026-07-06T23:07:25.185196Z","submitted_at":"2026-04-22T15:46:11Z","title":"Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-10T00:39:43.196010Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2604.20704"},"observation_digest":"sha256:61dc704f4aba502ec3ddae4df57cbc1709040a0e3c011d56e3364f9e377b812b","observation_id":"f212e6c5-eeec-4b5c-a2ad-89f372a980b7","resolution":{"observed_at":"2026-05-10T00:39:48.122964Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2604.23338","last_updated":"2026-05-06T17:17:02Z","snapshot_observed_at":"2026-08-06T19:46:39.219000Z","submitted_at":"2026-04-25T14:57:15Z","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-08T07:53:13.746141Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2604.23338"},"observation_digest":"sha256:6885720204ece5e7be8b9ef05bb7cb0651c6a916fe79585f61f118c3da37c0d5","observation_id":"dddd5a0c-14f5-4248-9b48-4efb575da680","resolution":{"observed_at":"2026-05-11T20:51:09.667835Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2604.25562","last_updated":"2026-04-28T12:32:21Z","snapshot_observed_at":"2026-07-06T23:11:25.757664Z","submitted_at":"2026-04-28T12:32:21Z","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:28.869796Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2604.25562"},"observation_digest":"sha256:80f065b5530ac26807152f06319ea2fa5da1a94a878c8c03b6c7d67a7910058b","observation_id":"37cd3745-84d6-4195-b60d-ed3087cf57bf","resolution":{"observed_at":"2026-05-12T00:06:17.749986Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2605.13213","last_updated":"2026-05-13T09:06:21Z","snapshot_observed_at":"2026-07-06T23:24:47.309044Z","submitted_at":"2026-05-13T09:06:21Z","title":"Hierarchical Attacks for Multi-Modal Multi-Agent Reasoning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-14T20:16:30.070819Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2605.13213"},"observation_digest":"sha256:177162e7566bfd7e0d7f781c770409b77d4b97a679bfcb35aaf8f1317d8e8c5a","observation_id":"340e67cf-c3a1-4204-b6e6-b70c2c43562b","resolution":{"observed_at":"2026-05-14T20:19:27.985337Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-07-06T23:26:23.179482Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:b075e3bec06898c76cd5d2c606e7701904b9437f29e69ed36e9b15df6615ff22","observation_id":"7dd0d4d6-204e-4545-94d4-73d5469467b5","resolution":{"observed_at":"2026-07-01T14:45:49.493714Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2606.00341","last_updated":"2026-05-29T20:29:35Z","snapshot_observed_at":"2026-08-07T20:25:37.926234Z","submitted_at":"2026-05-29T20:29:35Z","title":"ROGUE: Misaligned Agent Behavior Arising from Ordinary Computer Use","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T23:03:36.851403Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2606.00341"},"observation_digest":"sha256:353eefeecd281058b7d3c1143c00747123b59f11bc350a5ee42f2cfae2b32e3f","observation_id":"272ef0ff-a8bd-4a69-ba00-7ffa2993054e","resolution":{"observed_at":"2026-07-01T19:16:00.205129Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2606.00566","last_updated":"2026-05-30T06:38:41Z","snapshot_observed_at":"2026-07-06T23:41:15.410587Z","submitted_at":"2026-05-30T06:38:41Z","title":"Same Payload, Different Channel: Measuring Trust Asymmetry in Tool-Using Language Models","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-28T19:19:17.673497Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2606.00566"},"observation_digest":"sha256:b24eac2d957b3b04c434fbbbf4e86a74323a79bb3dac1e1e6915b1e664d11aa1","observation_id":"dad46d25-dd2b-4e11-9060-3a1f88fdcfe2","resolution":{"observed_at":"2026-06-28T19:22:34.397716Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2606.02449","last_updated":"2026-06-01T16:20:45Z","snapshot_observed_at":"2026-07-06T23:42:49.173711Z","submitted_at":"2026-06-01T16:20:45Z","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-28T14:57:57.218669Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2606.02449"},"observation_digest":"sha256:a6b40ecc7fcf35c414a16fe9b65193c9c7087010f1ba5908d5069359fe28daa9","observation_id":"0d03980d-0c1c-47f1-88c1-1f7bcfc76418","resolution":{"observed_at":"2026-07-01T22:56:19.621656Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2606.13385","last_updated":"2026-06-11T14:12:43Z","snapshot_observed_at":"2026-08-01T15:55:04.725190Z","submitted_at":"2026-06-11T14:12:43Z","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-27T06:20:04.789341Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2606.13385"},"observation_digest":"sha256:7bce936c721c00306d60940c5720450f74f0a7a4a3a3f0efd7cd1c07b952f2ce","observation_id":"96bad086-12c2-42ba-b5ae-69be35cb8f96","resolution":{"observed_at":"2026-07-03T15:48:35.844469Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2606.19826","last_updated":"2026-06-18T06:06:28Z","snapshot_observed_at":"2026-08-02T23:54:57.895439Z","submitted_at":"2026-06-18T06:06:28Z","title":"Heterogeneous LLM Debate Under Adversarial Peers: Honest Gains, Replacement Costs, and Resilience","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-06-26T17:17:05.107942Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2606.19826"},"observation_digest":"sha256:f1b2df1a5d7bc845e1dfa542ef5190f3fff117a3cd350b188646ff295730ac4e","observation_id":"ed479c4f-0621-40d8-9c54-cae7114d4241","resolution":{"observed_at":"2026-07-04T03:59:34.298535Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":"2406.12814","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-07-04T20:10:08.744897Z","title":"Adversarial at- tacks on multimodal agents","venue":null,"work_id":"67f90b48-268a-4f3e-b70f-f83af2650240","year":2024},"citing_paper":{"arxiv_id":"2606.25705","last_updated":"2026-06-24T11:18:01Z","snapshot_observed_at":"2026-08-06T10:26:35.331022Z","submitted_at":"2026-06-24T11:18:01Z","title":"GUI agent: Guided Exploration of User-Sensitive Screens","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-25T20:34:05.239277Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2606.25705"},"observation_digest":"sha256:6bde4dd6942733f63f02caa3a3af11fb2a00c89d2eb193566e351b7854035806","observation_id":"c9a8685d-6e46-4621-b52c-b19cee6bb60f","resolution":{"observed_at":"2026-07-04T20:10:08.746298Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12814","snapshot_observed_at":"2026-08-01T06:04:46.679818Z","title":"arXiv preprint arXiv:2406.12814 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-08T12:54:01.031419Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":284,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.679818Z"},"links":{"cited_paper":"/paper/2406.12814","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:ed255db2af93f0e05eaf96ffe171844e153875020b838a39cc8af952116e0587","observation_id":"3c00394e-4990-4059-8962-c5311c9b00e8","resolution":{"observed_at":"2026-08-01T06:04:46.679818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2406.12814/citation-record","integrity":"/paper/2406.12814/integrity","json":"/paper/2406.12814/citation-record.json","paper":"/paper/2406.12814"},"outbound":[],"paper":{"arxiv_id":"2406.12814","last_updated":"2025-02-04T20:02:17Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-08T10:00:10.515051Z","submitted_at":"2024-06-18T17:32:48Z","title":"Dissecting Adversarial Robustness of Multimodal LM Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 28 inbound Pith citation observations for arXiv:2406.12814."}