{"as_of":"2026-08-12T15:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:60125d3bedd3f85535ba2fc38657293b0d6a0b068db0050f940f9eda24cb8d45","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:11:21.591079Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T21:52:10.577915Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":"2410.16950","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Breaking react agents: Foot-in-the-door attack will get you in","venue":null,"work_id":"028f4cf7-3266-42c9-9708-9303fddc19d7","year":2024},"citing_paper":{"arxiv_id":"2503.21460","last_updated":"2025-03-27T12:50:17Z","snapshot_observed_at":"2026-07-06T20:59:35.694800Z","submitted_at":"2025-03-27T12:50:17Z","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","version":1},"reference_index":215,"source":"pdf_text","source_observed_at":"2026-05-22T21:51:34.309870Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2503.21460"},"observation_digest":"sha256:eb08f752e9522e54755d0a68c980991532ba9ce8c7e535cd35a167ba60feabe2","observation_id":"38141fb6-0b18-4a5a-a943-195001b0259d","resolution":{"observed_at":"2026-05-22T21:52:10.580519Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-08-07T12:11:21.591079Z","title":"Nakash, G","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05376","last_updated":"2025-06-09T05:48:22Z","snapshot_observed_at":"2026-08-10T02:41:13.540113Z","submitted_at":"2025-05-30T22:58:54Z","title":"A Red Teaming Roadmap Towards System-Level Safety","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:21.591079Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2506.05376"},"observation_digest":"sha256:975d19417c8f85a9c5f7fed780df1f9bc821126c540ac0bca5d6abeb18840ded","observation_id":"2246907f-97cf-487a-a612-a8ec356f9580","resolution":{"observed_at":"2026-08-07T12:11:21.591079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-08-06T23:59:57.968116Z","title":"Accessed: 2025-05-19","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.17318","last_updated":"2025-06-18T14:29:02Z","snapshot_observed_at":"2026-08-06T23:52:05.545407Z","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T23:59:57.968116Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2506.17318"},"observation_digest":"sha256:b00aadae17824d89d84d66b1e9df2a60f934f795a051b24605ec30e09e64eb01","observation_id":"0f711ea3-6b3e-41cf-8876-56db82a3083e","resolution":{"observed_at":"2026-08-06T23:59:57.968116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-08-06T21:34:45.103652Z","title":"Breaking react agents: Foot-in-the-door attack will get you in,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":125,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.103652Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:b78d95e4ad91cfc92ca9dfe7b15f9a70e2b7b98e1ebca6c591c28bb254f2bd02","observation_id":"5d815539-551b-4512-83c9-ca42a161687e","resolution":{"observed_at":"2026-08-06T21:34:45.103652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":"2410.16950","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Breaking react agents: Foot-in-the-door attack will get you in","venue":null,"work_id":"028f4cf7-3266-42c9-9708-9303fddc19d7","year":2024},"citing_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-08-11T02:37:54.478569Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"reference_index":115,"source":"pdf_text","source_observed_at":"2026-05-15T14:12:14.160789Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2603.09002"},"observation_digest":"sha256:968c3f7d30a04b0d303e00d5f8f183000970c1bf4a138012f44cdd08dc0be020","observation_id":"b0bc08b2-fcb1-4bc5-bbf7-fce50fb2435f","resolution":{"observed_at":"2026-05-15T14:15:55.021617Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":"2410.16950","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Breaking react agents: Foot-in-the-door attack will get you in","venue":null,"work_id":"028f4cf7-3266-42c9-9708-9303fddc19d7","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-07-06T23:18:07.750358Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6e332affbf241f98d021433f9f3377b31c477d5e78b0f8ff172ae3d59ca42332","observation_id":"34cdd629-50ad-40e5-9d26-38014056f2c5","resolution":{"observed_at":"2026-05-11T18:21:09.884262Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-07-11T14:39:55.782891Z","title":"arXiv preprint arXiv:2410.16950 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.04718","last_updated":"2026-07-06T06:43:21Z","snapshot_observed_at":"2026-08-10T15:19:46.389703Z","submitted_at":"2026-07-06T06:43:21Z","title":"FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-11T14:39:55.782891Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2607.04718"},"observation_digest":"sha256:1b0ac83cec0903cc1d4af981fbdd9a278817d80d569955d27db73d1f56764437","observation_id":"3455a80f-9022-4a9e-8616-80a06cff5c82","resolution":{"observed_at":"2026-07-11T14:39:55.782891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-07-11T14:39:55.782891Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.04718","last_updated":"2026-07-06T06:43:21Z","snapshot_observed_at":"2026-08-10T15:19:46.389703Z","submitted_at":"2026-07-06T06:43:21Z","title":"FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-11T14:39:55.782891Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2607.04718"},"observation_digest":"sha256:24ed162163e417249fd5f0f4e962e99b0f88f81afa3985b6aea21eae9af53360","observation_id":"5d8d9c7d-7017-4d77-80c3-65c4740db433","resolution":{"observed_at":"2026-07-11T14:39:55.782891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.16950/citation-record","integrity":"/paper/2410.16950/integrity","json":"/paper/2410.16950/citation-record.json","paper":"/paper/2410.16950"},"outbound":[],"paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-11T22:23:38.514950Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2410.16950."}