{"as_of":"2026-08-19T11:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:364c0be2bf8e1f6b92dc8a2158a8c5118b4b6995163bec3ec54a32db0a9df873","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":29,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T10:12:01.082250Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T12:27:04.225516Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-12T20:53:14.904442Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.09259","last_updated":"2024-12-09T14:22:14Z","snapshot_observed_at":"2026-08-15T23:29:53.216494Z","submitted_at":"2024-11-14T07:51:51Z","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T20:53:14.904442Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2411.09259"},"observation_digest":"sha256:b69b84ddcf42e8e56069fc3904b75846fdd7261be736817c8d2c4d1cb77a6876","observation_id":"f0945ce6-f0f6-4775-9887-602df82b7143","resolution":{"observed_at":"2026-08-12T20:53:14.904442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-08T20:06:58.358737Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-08-19T00:43:34.703842Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-08T20:06:58.358737Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2502.05174"},"observation_digest":"sha256:8b02b716ecaed1c75277ad958c4949b406ef4b6c9cba2e8f8244915ecabd9441","observation_id":"51c834a0-bcc7-4ef8-ae66-97d23a97fdcf","resolution":{"observed_at":"2026-08-08T20:06:58.358737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-08-17T13:35:14.591010Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-22T21:09:51.782808Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2504.11703"},"observation_digest":"sha256:81e680d4b269b9ee8655fcb516ca619e6b21c6e41e5c048ce856b90752d16c65","observation_id":"9c106925-bb18-4564-b5d7-683637fa0ab3","resolution":{"observed_at":"2026-05-22T21:12:08.473581Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-16T10:12:01.082250Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.18838","last_updated":"2025-04-26T07:48:52Z","snapshot_observed_at":"2026-08-17T04:06:12.060099Z","submitted_at":"2025-04-26T07:48:52Z","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","version":1},"reference_index":221,"source":"pdf_text","source_observed_at":"2026-08-16T10:12:01.082250Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2504.18838"},"observation_digest":"sha256:2e4798292803d021ee1343b2b1dd71c72acd989a624739de8044a4adb2855570","observation_id":"8efa1122-4a08-46d9-9fd6-c6128614394a","resolution":{"observed_at":"2026-08-16T10:12:01.082250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-15T22:59:53.438670Z","title":"Xu, C., Kang, M., Zhang, J., Liao, Z., Mo, L., Yuan, M., Sun, H., and Li, B","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.05849","last_updated":"2025-06-14T01:50:21Z","snapshot_observed_at":"2026-08-19T11:00:12.093868Z","submitted_at":"2025-05-09T07:40:17Z","title":"AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:59:53.438670Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.05849"},"observation_digest":"sha256:ffa22e26d05e37f2401a1a8819cd059be79bc0800dc867fe30c15d0e5e76c22d","observation_id":"eae67553-0fd5-4e6c-85af-cd745f00c8bc","resolution":{"observed_at":"2026-08-15T22:59:53.438670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2505.10924","last_updated":"2026-04-29T05:56:22Z","snapshot_observed_at":"2026-08-13T15:04:07.522862Z","submitted_at":"2025-05-16T06:56:42Z","title":"A Survey on the Safety and Security Threats of Computer-Using Agents: JARVIS or Ultron?","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-22T15:22:11.766850Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.10924"},"observation_digest":"sha256:11dbb26505bc8a0e4d93da901f7ae9841bc5a1694dc1bbcb48f01201fd482e2c","observation_id":"3e968913-e5f0-440f-ab50-4695e34851d6","resolution":{"observed_at":"2026-05-22T15:24:57.825168Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-15T21:05:35.065547Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.11063","last_updated":"2026-05-26T13:29:10Z","snapshot_observed_at":"2026-08-19T04:46:09.200395Z","submitted_at":"2025-05-16T10:00:15Z","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T21:05:35.065547Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.11063"},"observation_digest":"sha256:a08b8ce1da0cc779324e25251c7e4ba1309bdd6ac103b9be8b482b1258096c20","observation_id":"4eac4d0e-9c69-4fad-9581-b2bf0dea19b2","resolution":{"observed_at":"2026-08-15T21:05:35.065547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-15T20:28:15.532767Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12981","last_updated":"2025-05-20T07:02:05Z","snapshot_observed_at":"2026-08-17T09:08:07.309851Z","submitted_at":"2025-05-19T11:17:46Z","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T20:28:15.532767Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.12981"},"observation_digest":"sha256:87dd3559de7a7bc3f32259a4c073566b34fd84a5bf98c07711f063e7a8e375a6","observation_id":"494eb1e6-f899-4489-bfc5-f15213e909f3","resolution":{"observed_at":"2026-08-15T20:28:15.532767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-07T15:41:24.769802Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.14289","last_updated":"2026-06-05T10:24:33Z","snapshot_observed_at":"2026-08-14T05:02:11.760378Z","submitted_at":"2025-05-20T12:41:05Z","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:24.769802Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.14289"},"observation_digest":"sha256:3cceff6b369d77a455ee141ff4bf32467e8e7f320fbad0df0fb926e73810116c","observation_id":"0055c883-c31b-40e4-a78d-ea4dc6ea41eb","resolution":{"observed_at":"2026-08-07T15:41:24.769802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-07T14:42:38.101980Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-16T08:07:02.839270Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.101980Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:78e71e41b3ae1070e0b6f80e473955fd9e0f73af81947a94e8e2bb580466f228","observation_id":"9d2a9354-7c18-415f-a0b3-f555568db69a","resolution":{"observed_at":"2026-08-07T14:42:38.101980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-07T13:32:47.362113Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents.arXiv preprint arXiv:2410.17401, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.21499","last_updated":"2025-05-27T17:59:05Z","snapshot_observed_at":"2026-08-07T13:24:27.400642Z","submitted_at":"2025-05-27T17:59:05Z","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:32:47.362113Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.21499"},"observation_digest":"sha256:2fab0980f343e960063bfd324acd583cf46f18126918ec7f6de09baa80477ac3","observation_id":"dea2d02b-e66d-4933-afd6-4ec4a4e03765","resolution":{"observed_at":"2026-08-07T13:32:47.362113Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T22:23:48.692001Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.21874","last_updated":"2025-06-27T03:13:47Z","snapshot_observed_at":"2026-08-13T22:46:27.309579Z","submitted_at":"2025-06-27T03:13:47Z","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:48.692001Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2506.21874"},"observation_digest":"sha256:e0547120349ee103adce707c27aa24e032a316d0fe21deebe9435f76af8d1926","observation_id":"b86ad2e5-c65e-46e7-9070-49f6da456177","resolution":{"observed_at":"2026-08-06T22:23:48.692001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2506.23978","last_updated":"2026-05-16T17:29:09Z","snapshot_observed_at":"2026-08-16T23:05:27.604472Z","submitted_at":"2025-06-30T15:45:17Z","title":"LLM Agents Are the Antidote to Walled Gardens","version":3},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-05-22T00:41:19.750928Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2506.23978"},"observation_digest":"sha256:c1bf7be6bd185fa986651fff1688af5861d052bccff1e154b392328dcfc9c1f6","observation_id":"d554829c-d246-4a8d-ba50-f2c560642faa","resolution":{"observed_at":"2026-05-22T00:44:29.385051Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2507.04227","last_updated":"2026-04-14T14:47:25Z","snapshot_observed_at":"2026-08-15T13:50:06.222239Z","submitted_at":"2025-07-06T03:31:36Z","title":"Mobile GUI Agents under Real-world Threats: Are We There Yet?","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-19T06:57:25.257775Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.04227"},"observation_digest":"sha256:409df226e0fd492d7ff83cb6e8ff6e05baf43433e3c574e1bf8c5fc9e49444c0","observation_id":"edb5e66b-55fd-4313-b530-04c568e6292a","resolution":{"observed_at":"2026-05-19T07:02:07.912856Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T16:12:51.111978Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-17T14:07:37.128309Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.111978Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:b043908096085e8389eef59a783553f0fefbfaeddb428175e7540ecc2e0e9903","observation_id":"10569b72-f8b6-470e-b0a8-8290ce82ad5a","resolution":{"observed_at":"2026-08-06T16:12:51.111978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T13:06:39.378280Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21017","last_updated":"2025-07-28T17:38:29Z","snapshot_observed_at":"2026-08-19T10:24:11.476818Z","submitted_at":"2025-07-28T17:38:29Z","title":"MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T13:06:39.378280Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.21017"},"observation_digest":"sha256:de531e71309d98313e1a5117932f5adbb7489841f299681eab7bf8bc4b5e2ea1","observation_id":"93533467-36d7-41de-9837-9439022d3a6a","resolution":{"observed_at":"2026-08-06T13:06:39.378280Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T13:05:40.441993Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.21206","last_updated":"2025-07-28T17:58:12Z","snapshot_observed_at":"2026-08-14T13:44:31.305337Z","submitted_at":"2025-07-28T17:58:12Z","title":"Agentic Web: Weaving the Next Web with AI Agents","version":1},"reference_index":237,"source":"arxiv_source","source_observed_at":"2026-08-06T13:05:40.441993Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.21206"},"observation_digest":"sha256:24cc985e1987e0b588e5a6c78f7c8937245dbf100241e8d6e3a5f2631ea8bf38","observation_id":"10e90b88-ef6f-40a2-8efb-f88a6454f95b","resolution":{"observed_at":"2026-08-06T13:05:40.441993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-05T05:09:39.975185Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents.arXiv preprint arXiv:2410.17401, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.05755","last_updated":"2026-06-28T05:20:23Z","snapshot_observed_at":"2026-08-17T05:43:59.220148Z","submitted_at":"2025-09-06T15:48:49Z","title":"Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment","version":6},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T05:09:39.975185Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2509.05755"},"observation_digest":"sha256:5b320a88f34a47da4c40b435cab1f71f47d59ea4db793d0c5f5ec93fac407917","observation_id":"9c655096-f07b-42c1-b1cc-3548e9f88d27","resolution":{"observed_at":"2026-08-05T05:09:39.975185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:00ee7c872ea71469bf4343a58f707ef36188fa2ca52172e71bb4bb32c4c4a43e","observation_id":"8af6d729-c9ed-4f2f-9f76-ca0858ec5dc5","resolution":{"observed_at":"2026-05-18T03:42:22.033296Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-03T10:45:19.642964Z","title":"arXiv preprint arXiv:2410.17401 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-19T07:19:25.386537Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.642964Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:2acd391d49c4a613dda89316536727fd87ff7d8de47da08f3c446995e0ea6a49","observation_id":"b149cb52-69c8-4166-9817-38d256c2f88f","resolution":{"observed_at":"2026-08-03T10:45:19.642964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-08-17T17:46:31.291606Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:b3e7fc897b3ce7dd14e5e5e9b22651fade40e0e3dc6e8b0bbcb8a4625ae7b79f","observation_id":"e104e959-3b76-41c6-8dae-fc303042de65","resolution":{"observed_at":"2026-05-10T21:55:52.954590Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2604.06811","last_updated":"2026-05-28T07:57:37Z","snapshot_observed_at":"2026-08-13T00:23:04.746651Z","submitted_at":"2026-04-08T08:24:48Z","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-10T17:36:19.694339Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2604.06811"},"observation_digest":"sha256:5d94baa569ca4c40ebc5e2bba619c7fb6d153170d670e19e5ab5c58492945794","observation_id":"16532d4d-f6ef-4fd1-85f5-bd52dbd3b549","resolution":{"observed_at":"2026-05-11T06:31:02.019262Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2605.15030","last_updated":"2026-05-14T16:26:27Z","snapshot_observed_at":"2026-08-13T15:20:39.475290Z","submitted_at":"2026-05-14T16:26:27Z","title":"WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-06-30T20:16:13.413064Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2605.15030"},"observation_digest":"sha256:9a56c97b2d9d99f6bebfe85b8d122f2fcdee258d0d67cb587d9fbcac51e11725","observation_id":"5f421e42-7406-4f35-88fa-7c4b5930ca08","resolution":{"observed_at":"2026-07-01T14:35:47.827461Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2606.02449","last_updated":"2026-06-01T16:20:45Z","snapshot_observed_at":"2026-08-16T00:08:27.007461Z","submitted_at":"2026-06-01T16:20:45Z","title":"HLL: Can Agents Cross Humanity's Last Line of Verification?","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-28T14:57:57.218669Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2606.02449"},"observation_digest":"sha256:86d79984cd39c242ef0f41ae46b716e2fa4cac2746637c98288638fc523a11f7","observation_id":"2463621c-1a0e-4eca-af75-b74831448b05","resolution":{"observed_at":"2026-07-01T22:56:19.639725Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-14T14:49:44.769381Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:af947cc83d8ca4c39ba992d50e2208f1467299587c8a43ae2e80189bb25f1cc5","observation_id":"3d91a8ab-2976-40cd-80b9-2f318ec326d7","resolution":{"observed_at":"2026-07-03T21:08:58.366599Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-11T14:39:55.782891Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.04718","last_updated":"2026-07-06T06:43:21Z","snapshot_observed_at":"2026-08-13T23:31:41.836977Z","submitted_at":"2026-07-06T06:43:21Z","title":"FORGE: Research-Trajectory Hijacking Attacks on Deep Research Agents","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-07-11T14:39:55.782891Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2607.04718"},"observation_digest":"sha256:8911f11ec3fd48d11304bce366316c77440705b612edeb7862b8b5127dbd787a","observation_id":"fa67aa11-7fb1-4ed2-bc83-b5857ffef034","resolution":{"observed_at":"2026-07-11T14:39:55.782891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":"2410.17401","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-07-10T12:27:04.225516Z","title":"Ad- vweb: Controllable black-box attacks on vlm-powered web agents","venue":"cs.CR","work_id":"2a343e0b-c7ca-43e4-a88b-e942d6efea85","year":2024},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-07T03:47:57.753615Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:a3a43610979936a1ac2d94d4ccab24c5c167435af4d0fe0cc3720632fbaf9a20","observation_id":"c9a13f31-a8b4-478e-9db2-77d30dd93cac","resolution":{"observed_at":"2026-07-10T12:27:04.226700Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-01T06:04:46.674969Z","title":"arXiv preprint arXiv:2410.17401 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.22024","last_updated":"2026-07-24T06:43:09Z","snapshot_observed_at":"2026-08-19T00:17:53.109755Z","submitted_at":"2026-07-24T06:43:09Z","title":"Agent Security Needs Redefinition through a Holistic Framework","version":1},"reference_index":283,"source":"arxiv_source","source_observed_at":"2026-08-01T06:04:46.674969Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2607.22024"},"observation_digest":"sha256:b96be5588279274270e7d8ff32e0955f98f2a04edd64cb8b05833b1b6a150b26","observation_id":"f49a09b2-52bf-44b8-93c4-5ef84f5a5a29","resolution":{"observed_at":"2026-08-01T06:04:46.674969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-11T20:19:16.134509Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09278","last_updated":"2026-08-10T08:33:19Z","snapshot_observed_at":"2026-08-13T23:42:32.291444Z","submitted_at":"2026-08-10T08:33:19Z","title":"Software Engineering for and with GUI Agent","version":1},"reference_index":265,"source":"pdf_text","source_observed_at":"2026-08-11T20:19:16.134509Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2608.09278"},"observation_digest":"sha256:bc2f8fe2d9afc18018e2e0c39ff9163a4cdf716f5385d2e5cf3a29cf0bda5c6c","observation_id":"d0f18767-8e0b-4614-a88e-25f9002adb60","resolution":{"observed_at":"2026-08-11T20:19:16.134509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2410.17401/citation-record","integrity":"/paper/2410.17401/integrity","json":"/paper/2410.17401/citation-record.json","paper":"/paper/2410.17401"},"outbound":[],"paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","latest_version":4,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T13:06:50.874384Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 29 inbound Pith citation observations for arXiv:2410.17401."}