{"as_of":"2026-08-11T05:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ac2d9572761e1850a74402e1205eca64a6800d6c01a0c5b6b1a1e9a6471f7798","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":12,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:54:11.553862Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T21:28:59.121693Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-08-11T04:54:11.553862Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.18295","last_updated":"2024-12-29T21:25:04Z","snapshot_observed_at":"2026-08-11T04:47:50.280188Z","submitted_at":"2024-12-24T09:03:57Z","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","version":2},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-11T04:54:11.553862Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2412.18295"},"observation_digest":"sha256:c59554d228751b782cd24f96cfc4cd1b97cd12a4da226c667d13f0f9b4e1cecb","observation_id":"8bdd049a-c809-413f-88b8-9116081a2156","resolution":{"observed_at":"2026-08-11T04:54:11.553862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-08-07T14:32:58.142259Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18543","last_updated":"2025-05-24T06:17:59Z","snapshot_observed_at":"2026-08-10T23:14:32.359673Z","submitted_at":"2025-05-24T06:17:59Z","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T14:32:58.142259Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2505.18543"},"observation_digest":"sha256:2415cd0fe5cc3e3304c55c4008ff6bd27d13f8983761bc67257398cc80cd60ba","observation_id":"cb8b98b8-0102-46c7-8d13-1c1f8179ec3a","resolution":{"observed_at":"2026-08-07T14:32:58.142259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2603.12230","last_updated":"2026-04-05T08:33:19Z","snapshot_observed_at":"2026-08-04T04:27:19.804842Z","submitted_at":"2026-03-12T17:49:39Z","title":"Security Considerations for Artificial Intelligence Agents","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-15T12:37:27.153365Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2603.12230"},"observation_digest":"sha256:74c823220c4aed5ad05b0391f033b773d38c62bc933ec512c4dec13f2979a661","observation_id":"94d22acf-63de-4e2e-9ce0-ceebb0130e82","resolution":{"observed_at":"2026-05-15T12:40:00.280364Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2604.00387","last_updated":"2026-04-04T07:18:50Z","snapshot_observed_at":"2026-08-10T21:21:22.811256Z","submitted_at":"2026-04-01T02:16:42Z","title":"RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-13T23:14:47.704353Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2604.00387"},"observation_digest":"sha256:4dd3efe5c2b0af3a298effb2f78d4849b55f339d871ecb441436c66a524a2f42","observation_id":"3cf259b4-80d4-4e7d-9dea-35fe00e847d6","resolution":{"observed_at":"2026-05-13T23:18:25.892181Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2605.09594","last_updated":"2026-05-10T15:13:38Z","snapshot_observed_at":"2026-08-08T16:40:33.934686Z","submitted_at":"2026-05-10T15:13:38Z","title":"Trust Me, Import This: Dependency Steering Attacks via Malicious Agent Skills","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-12T03:49:49.484361Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2605.09594"},"observation_digest":"sha256:24790977a0295e10d428f6063a1d910c5dcdec77b7e30af4bc395d0e06ff2ab6","observation_id":"a5099ca0-172d-4559-9ecf-798fd181ac5a","resolution":{"observed_at":"2026-05-12T06:56:27.275598Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2605.09822","last_updated":"2026-05-10T23:55:13Z","snapshot_observed_at":"2026-08-05T13:34:08.474381Z","submitted_at":"2026-05-10T23:55:13Z","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:06.805794Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2605.09822"},"observation_digest":"sha256:8acab1f94e0ca2080bd58013b29226cde49d60c5c148e588fde75e0ffca26828","observation_id":"cbeed13a-274a-4c0a-afd1-5ec337e20903","resolution":{"observed_at":"2026-05-12T07:37:03.994559Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2605.12015","last_updated":"2026-05-27T06:26:15Z","snapshot_observed_at":"2026-07-06T23:23:44.276236Z","submitted_at":"2026-05-12T12:03:54Z","title":"SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-05-13T05:10:04.763149Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2605.12015"},"observation_digest":"sha256:70eccf93473de906170cf058174f225c1a3da3439eb53b6f10306c7dceb8909c","observation_id":"31b07c9d-2ab5-4148-b991-cbdcdee72ee1","resolution":{"observed_at":"2026-05-13T05:12:17.885796Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2605.12015","last_updated":"2026-05-27T06:26:15Z","snapshot_observed_at":"2026-07-06T23:23:44.276236Z","submitted_at":"2026-05-12T12:03:54Z","title":"SkillSafetyBench: Evaluating Agent Safety under Skill-Facing Attack Surfaces","version":2},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-06-30T22:30:59.927227Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2605.12015"},"observation_digest":"sha256:4243d24f077419fe1515608763c3a64b493f8be6eb231db8cf6c7a224554b738","observation_id":"d1fbc90f-663c-4b16-8a6f-ddb8db223a3c","resolution":{"observed_at":"2026-07-01T13:55:46.235541Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2605.14859","last_updated":"2026-05-15T03:53:20Z","snapshot_observed_at":"2026-07-06T23:26:13.644646Z","submitted_at":"2026-05-14T14:05:58Z","title":"Do Coding Agents Understand Least-Privilege Authorization?","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-19T16:34:14.379419Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2605.14859"},"observation_digest":"sha256:f1402af6ff0dcfd21ebe4a078b9f269b461a6c82f7e2e7ac48da39586bd9247b","observation_id":"6bf015e1-ecf5-42f5-aef1-71bf408aaa82","resolution":{"observed_at":"2026-05-19T16:37:40.099361Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":"2408.04870","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-07-03T21:28:59.121693Z","title":"Confusedpilot: Confused deputy risks in rag-based llms","venue":null,"work_id":"12376862-b2d1-480c-85e4-d3d4a6c60724","year":2024},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:3816beb04e34cf9cdde9124f42661bf0034449ed9d65ce12f5a7d87ac46f5ec9","observation_id":"7d90cce7-a70f-4ab1-a440-5b211f87f444","resolution":{"observed_at":"2026-07-03T21:28:59.123260Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-08-01T16:32:04.007867Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17986","last_updated":"2026-07-20T14:16:55Z","snapshot_observed_at":"2026-08-05T13:59:48.633736Z","submitted_at":"2026-07-20T14:16:55Z","title":"Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T16:32:04.007867Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2607.17986"},"observation_digest":"sha256:b72851a2fba5cdc63e6d61879dd3f76c58bc7770cb3001709f4204e7a956ecdd","observation_id":"3bfbfcb4-d053-4cc4-b692-0a084af6cbf8","resolution":{"observed_at":"2026-08-01T16:32:04.007867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.04870","snapshot_observed_at":"2026-08-06T20:27:13.224775Z","title":"Confusedpilot: Confused deputy risks in rag-based llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04626","last_updated":"2026-08-05T09:32:35Z","snapshot_observed_at":"2026-08-09T23:14:59.216265Z","submitted_at":"2026-08-05T09:32:35Z","title":"Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-06T20:27:13.224775Z"},"links":{"cited_paper":"/paper/2408.04870","citing_paper":"/paper/2608.04626"},"observation_digest":"sha256:5cabe43e23bcb41ebd38c7772f924a3c49ff35288b29cc5b5149cec8ad7cee50","observation_id":"b6a1ee41-8a7e-4896-ad24-3152dafd7dea","resolution":{"observed_at":"2026-08-06T20:27:13.224775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2408.04870/citation-record","integrity":"/paper/2408.04870/integrity","json":"/paper/2408.04870/citation-record.json","paper":"/paper/2408.04870"},"outbound":[],"paper":{"arxiv_id":"2408.04870","last_updated":"2024-10-23T05:55:31Z","latest_version":5,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T18:58:43.349175Z","submitted_at":"2024-08-09T05:20:05Z","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2408.04870."}