{"as_of":"2026-08-10T13:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cd8106d82ed51f16b540863e152ba6d53646416de0c3dbf1b1d8f26d32b96ea3","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":20,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":20,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":20,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:27:03.485673Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T04:09:34.473904Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2503.21460","last_updated":"2025-03-27T12:50:17Z","snapshot_observed_at":"2026-07-06T20:59:35.694800Z","submitted_at":"2025-03-27T12:50:17Z","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","version":1},"reference_index":197,"source":"pdf_text","source_observed_at":"2026-05-22T21:51:34.309870Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2503.21460"},"observation_digest":"sha256:195d05b8b3da365a78d52d7b43e27918ca5b447279d07ebd8968a22813438522","observation_id":"2773a69e-1617-4b5a-8fea-1ca2483c6d9b","resolution":{"observed_at":"2026-05-22T21:52:10.673631Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-07T14:27:03.485673Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.18889","last_updated":"2025-08-24T03:15:13Z","snapshot_observed_at":"2026-08-08T20:47:09.765405Z","submitted_at":"2025-05-24T22:22:43Z","title":"Security Concerns for Large Language Models: A Survey","version":5},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:27:03.485673Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2505.18889"},"observation_digest":"sha256:c8f455cd7185a8af47657e470dd5bc9be8d79b34118f44ce3f9815e13337add7","observation_id":"c592c1ef-f1f2-4a3f-a571-497ca4cfcd5f","resolution":{"observed_at":"2026-08-07T14:27:03.485673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-07T13:52:05.421366Z","title":"Red-teaming llm multi-agent systems via communication attacks.arXiv preprint arXiv:2502.14847, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.20824","last_updated":"2025-05-27T07:34:40Z","snapshot_observed_at":"2026-08-08T13:22:09.551933Z","submitted_at":"2025-05-27T07:34:40Z","title":"MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:52:05.421366Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2505.20824"},"observation_digest":"sha256:dd84e93ecd8f750ecadb04ea4391af50b9e99e7943c8f980f6ee03aa1a7f1e81","observation_id":"35738ffd-778f-4bf3-8dbf-7c1438a65a26","resolution":{"observed_at":"2026-08-07T13:52:05.421366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2506.02546","last_updated":"2026-04-14T05:32:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-03T07:32:57Z","title":"To trust or not to trust: Attention-based Trust Management for LLM Multi-Agent Systems","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-19T11:30:47.877793Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2506.02546"},"observation_digest":"sha256:ec20afe87bc28dd49efe269f3af910183826146e8abef0b24647fb8cee403552","observation_id":"dfc2409e-3b9e-4efd-a012-6d2338f6f172","resolution":{"observed_at":"2026-05-19T11:32:17.362841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-07T00:32:36.528134Z","title":"Red-teaming llm multi-agent systems via communication attacks.arXiv preprint arXiv:2502.14847, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:32:36.528134Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2506.13666"},"observation_digest":"sha256:22be16f59b3dc60a140f0bd2fe537c6cc7b0be9f2eaae664e3f4376f17c4959f","observation_id":"73b9fd81-05b3-489c-b34b-cac9663ac932","resolution":{"observed_at":"2026-08-07T00:32:36.528134Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-06T21:34:45.134534Z","title":"Red- teaming llm multi-agent systems via communication attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23844","last_updated":"2025-06-30T13:34:34Z","snapshot_observed_at":"2026-08-08T15:24:13.507722Z","submitted_at":"2025-06-30T13:34:34Z","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","version":1},"reference_index":134,"source":"pdf_text","source_observed_at":"2026-08-06T21:34:45.134534Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2506.23844"},"observation_digest":"sha256:062605e262bfb37061d9b6a385df8c15d89c41ff12710948b6d5d129ae17abf7","observation_id":"83890223-ed75-4b94-856b-82f84cea7725","resolution":{"observed_at":"2026-08-06T21:34:45.134534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-06T19:46:27.451948Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.04673","last_updated":"2026-07-11T20:48:21Z","snapshot_observed_at":"2026-08-09T06:09:37.420774Z","submitted_at":"2025-07-07T05:35:21Z","title":"Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T19:46:27.451948Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2507.04673"},"observation_digest":"sha256:6329ef49f68f781e19959d2020548add8021ccc15d9d5de6dfecad16c4b523ce","observation_id":"f4e24e59-c187-4a25-b386-c1458f598470","resolution":{"observed_at":"2026-08-06T19:46:27.451948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-06T13:05:35.850228Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.21206","last_updated":"2025-07-28T17:58:12Z","snapshot_observed_at":"2026-08-08T10:48:52.442522Z","submitted_at":"2025-07-28T17:58:12Z","title":"Agentic Web: Weaving the Next Web with AI Agents","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-08-06T13:05:35.850228Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2507.21206"},"observation_digest":"sha256:ebc95aa9ff01895e27e897113f21ebc3be1c1e07fea0c5e90c8e86938d73b970","observation_id":"493531a5-7223-4715-85e0-97f841b741a3","resolution":{"observed_at":"2026-08-06T13:05:35.850228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-05T15:26:33.586744Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19870","last_updated":"2025-08-27T13:33:35Z","snapshot_observed_at":"2026-08-07T05:20:03.066438Z","submitted_at":"2025-08-27T13:33:35Z","title":"Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T15:26:33.586744Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2508.19870"},"observation_digest":"sha256:111494241bf5990f58ff1a609ca00ebc45951d147af9b8b68f8c99b0c60b71d9","observation_id":"413eb5ff-40a8-487c-8d11-05ea3f8076e2","resolution":{"observed_at":"2026-08-05T15:26:33.586744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2510.12826","last_updated":"2026-04-25T22:54:37Z","snapshot_observed_at":"2026-08-09T21:13:46.129374Z","submitted_at":"2025-10-11T04:42:29Z","title":"Scheming Ability in LLM-to-LLM Strategic Interactions","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-18T07:50:30.597108Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2510.12826"},"observation_digest":"sha256:65f1e347bc1b5987885686bf484f46e097d019735e0f86af91bf141feba8e1ab","observation_id":"112bf727-9b10-478b-a7ff-eb820c43a703","resolution":{"observed_at":"2026-05-18T07:51:03.755743Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-08-04T08:44:56.450078Z","title":"Llm-based multi-agent systems for software engineering: Literature review, vision, and the road ahead.ACM Transactions on Software Engineering and Methodology, 34(5):1–30, 2025a","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.19420","last_updated":"2026-05-26T15:57:06Z","snapshot_observed_at":"2026-08-08T13:12:40.582936Z","submitted_at":"2025-10-22T09:43:32Z","title":"Securing Multi-Agent Systems Against Corruptions via Node Contribution Backpropagation","version":2},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-04T08:44:56.450078Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2510.19420"},"observation_digest":"sha256:4d2acbde74500a60fa5b9caf101d7281257405707610c0fcd594f5f3b1ef10d8","observation_id":"e33f6593-76cc-4325-9d1a-fd7366348b49","resolution":{"observed_at":"2026-08-04T08:44:56.450078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":255,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:ae8dbc73a1620ceb286235f917bcd12487afa8797d71139254bb506aab4700fa","observation_id":"2266cc27-cde0-4ab5-bb6c-c657aeb9709d","resolution":{"observed_at":"2026-05-18T03:42:22.082333Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-15T13:15:31.225992Z","title":"Red-teaming llm multi-agent systems via communication attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.07457","last_updated":"2026-03-08T04:16:06Z","snapshot_observed_at":"2026-08-08T01:21:30.388475Z","submitted_at":"2026-03-08T04:16:06Z","title":"How Well Do AI Systems Solve AP Physics? A Comparative Evaluation of Large Language Models on Algebra-Based Free Response Questions","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-15T13:15:31.225992Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2603.07457"},"observation_digest":"sha256:15a3386ba180aaabe162e44008f17e8e7e72c2648d18fbb3f9b5890bfaacca5a","observation_id":"2cdb75c8-c04a-48a0-a140-3ca568e3d09b","resolution":{"observed_at":"2026-07-15T13:15:31.225992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2604.02767","last_updated":"2026-04-03T06:25:18Z","snapshot_observed_at":"2026-08-02T15:11:57.622955Z","submitted_at":"2026-04-03T06:25:18Z","title":"SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-13T20:14:56.132341Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2604.02767"},"observation_digest":"sha256:72e2e3d76f51130d6f387fb4c7babe503776320ace79c2a40b7bbcbcf9523489","observation_id":"c9c9602b-0016-4c45-add7-2a3ea55de254","resolution":{"observed_at":"2026-05-13T20:18:13.479988Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2605.05846","last_updated":"2026-05-07T08:21:51Z","snapshot_observed_at":"2026-08-02T22:13:21.752885Z","submitted_at":"2026-05-07T08:21:51Z","title":"LoopTrap: Termination Poisoning Attacks on LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T09:25:11.059634Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2605.05846"},"observation_digest":"sha256:0d9ba512133330cf68449ce6298f104fb93639d6d391f2b829be14c2517f26e7","observation_id":"aabf82e7-1551-444d-812a-6e4fd64568fa","resolution":{"observed_at":"2026-05-11T20:21:10.501482Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2605.06933","last_updated":"2026-05-18T15:00:37Z","snapshot_observed_at":"2026-08-02T06:59:00.397669Z","submitted_at":"2026-05-07T20:46:07Z","title":"MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-11T01:08:47.097355Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2605.06933"},"observation_digest":"sha256:855c5dcc17111c459f96de37a6819895a6e4947be36c4b453ee526f8332f6cad","observation_id":"85ac3812-a714-4bb9-a50e-80ea2c19310b","resolution":{"observed_at":"2026-05-11T04:41:00.414337Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2605.06933","last_updated":"2026-05-18T15:00:37Z","snapshot_observed_at":"2026-08-02T06:59:00.397669Z","submitted_at":"2026-05-07T20:46:07Z","title":"MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-20T22:31:48.507150Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2605.06933"},"observation_digest":"sha256:4dec1a0b4f6a6873c5870ca0cf1e172bc26414830bd89238bdcee210a3ecd7b8","observation_id":"6df49b03-7fc8-4505-8dea-d8d8d3c32d13","resolution":{"observed_at":"2026-05-20T22:33:48.495283Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2605.08268","last_updated":"2026-05-08T03:10:22Z","snapshot_observed_at":"2026-07-06T23:20:33.816373Z","submitted_at":"2026-05-08T03:10:22Z","title":"Insider Attacks in Multi-Agent LLM Consensus Systems","version":1},"reference_index":138,"source":"arxiv_source","source_observed_at":"2026-05-12T00:52:23.019201Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2605.08268"},"observation_digest":"sha256:98b489f66c356ecedc465ac478cd0b19e223a9174e4c0c58aacbb4a2d5330550","observation_id":"c7ccac6c-efec-420c-8eab-b62051382953","resolution":{"observed_at":"2026-05-12T08:41:23.755616Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2606.20408","last_updated":"2026-06-19T01:38:27Z","snapshot_observed_at":"2026-08-03T15:44:02.265910Z","submitted_at":"2026-06-18T15:57:53Z","title":"NRT-Bench: Benchmarking Multi-Turn Red-Teaming of LLM Operator Agents in Safety-Critical Control Rooms","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T17:13:26.201462Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2606.20408"},"observation_digest":"sha256:8c5dfb98c07c6a9a27f14f57b9e8bbf85fa22024b70fbd409a0d9aeb7bfdf3e4","observation_id":"c43ce07a-b28c-4bfe-b59e-b1904853e09e","resolution":{"observed_at":"2026-07-04T04:09:34.476015Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","version":2},"cited_work":{"arxiv_id":"2502.14847","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.14847","snapshot_observed_at":"2026-07-04T04:09:34.473904Z","title":"Red-teaming llm multi-agent systems via communication attacks","venue":null,"work_id":"515257ce-0efd-44e8-ad95-07b37635d0d1","year":2025},"citing_paper":{"arxiv_id":"2606.30602","last_updated":"2026-06-29T17:40:45Z","snapshot_observed_at":"2026-08-03T17:51:38.702679Z","submitted_at":"2026-06-29T17:40:45Z","title":"MESA: Prioritizing Vulnerable Communication Channels for Securing Multi-Agent Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-30T04:48:51.748711Z"},"links":{"cited_paper":"/paper/2502.14847","citing_paper":"/paper/2606.30602"},"observation_digest":"sha256:74c5cdfeadc20fcd53cf96f9947eec7b1ad73cd437a5b8c99a3a4dec93f7f84c","observation_id":"8cc5fc70-00bf-459a-bca2-bf7317f3f4ed","resolution":{"observed_at":"2026-06-30T16:14:53.912432Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2502.14847/citation-record","integrity":"/paper/2502.14847/integrity","json":"/paper/2502.14847/citation-record.json","paper":"/paper/2502.14847"},"outbound":[],"paper":{"arxiv_id":"2502.14847","last_updated":"2025-06-02T01:51:09Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T18:01:00.658329Z","submitted_at":"2025-02-20T18:55:39Z","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 20 inbound Pith citation observations for arXiv:2502.14847."}