{"as_of":"2026-08-09T22:52:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:acb8cba7a97bc1b834f925208efb1da875e209daaa072afac8c2909a7cc177e5","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":11,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:20:59.844074Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-21T10:44:08.023327Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T14:20:59.844074Z","title":"Securing genai multi- agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.19301","last_updated":"2025-05-28T17:37:25Z","snapshot_observed_at":"2026-08-07T14:15:00.137379Z","submitted_at":"2025-05-25T20:21:55Z","title":"A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T14:20:59.844074Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2505.19301"},"observation_digest":"sha256:24224d3c207d719e0294c7bb213900ed93a3decdf458470cc5e1fb19116ea371","observation_id":"f7153ac0-31ec-4ff0-9df8-ce9cc889afe8","resolution":{"observed_at":"2026-08-07T14:20:59.844074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T11:49:18.396852Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01333","last_updated":"2025-06-02T05:22:38Z","snapshot_observed_at":"2026-08-07T12:33:40.874784Z","submitted_at":"2025-06-02T05:22:38Z","title":"ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:49:18.396852Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.01333"},"observation_digest":"sha256:20cc8ff8830ee3626becba580983d4f0371100fcfb24ba87f73b6b32094bfa0e","observation_id":"dc863da8-ffee-40a7-ba5f-6536273d983a","resolution":{"observed_at":"2026-08-07T11:49:18.396852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T11:38:15.518747Z","title":"Securing genai multi- agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.01900","last_updated":"2025-06-02T17:22:47Z","snapshot_observed_at":"2026-08-09T08:54:03.061888Z","submitted_at":"2025-06-02T17:22:47Z","title":"COALESCE: Economic and Security Dynamics of Skill-Based Task Outsourcing Among Team of Autonomous LLM Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:38:15.518747Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.01900"},"observation_digest":"sha256:3fbc61510b1add403666ad5ed4b8c331010fa5be8b8f3f8b98685052074c3cd3","observation_id":"f3435362-20a0-4c73-b76d-1b2c538fd480","resolution":{"observed_at":"2026-08-07T11:38:15.518747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-07T00:34:15.013981Z","title":"Securing genai multi- agent systems against tool squatting: A zero trust registry-based approach,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.13590","last_updated":"2025-06-16T15:18:24Z","snapshot_observed_at":"2026-08-09T20:52:49.752066Z","submitted_at":"2025-06-16T15:18:24Z","title":"Agent Capability Negotiation and Binding Protocol (ACNBP)","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:34:15.013981Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2506.13590"},"observation_digest":"sha256:5b036e7235e31178064d55dbdb0651ec9053a2ac416433e86a246824754c415d","observation_id":"ff381ae6-4891-4584-83ca-96c7e350fb24","resolution":{"observed_at":"2026-08-07T00:34:15.013981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-06T21:08:51.135164Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach [Preprint]","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.00907","last_updated":"2025-07-01T16:11:41Z","snapshot_observed_at":"2026-08-08T08:15:02.488868Z","submitted_at":"2025-07-01T16:11:41Z","title":"The Age of Sensorial Zero Trust: Why We Can No Longer Trust Our Senses","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:08:51.135164Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2507.00907"},"observation_digest":"sha256:672e0cae58cdeec8a26abbd629006201079830c0510ce0b7c3abaa58f729ff75","observation_id":"32f39cdc-cbc3-4fff-acdb-4c86179ef281","resolution":{"observed_at":"2026-08-06T21:08:51.135164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-08-05T22:51:28.127341Z","title":"S.; Huang, K.; and Habler, I","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.127341Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:4b5cebfd73198044c63c4c880153e69bc52a557361fdd9a4ad5827498af05efa","observation_id":"e30bdcf6-6307-4918-9df7-d79bc69dd08e","resolution":{"observed_at":"2026-08-05T22:51:28.127341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-07-15T12:11:00.253650Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.09133","last_updated":"2026-07-10T10:10:02Z","snapshot_observed_at":"2026-08-09T13:37:51.039968Z","submitted_at":"2026-03-10T03:13:24Z","title":"Detailed analysis of possible new-physics effects in the semileptonic decay $B_s \\to D_s^{(*)}\\tau\\bar{\\nu}$","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-15T12:11:00.253650Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2603.09133"},"observation_digest":"sha256:a1314a2c97f837677628c00256f2e678d6116fedbe21a74093b0e5a3ce618e9b","observation_id":"2c567bf7-93e7-43b3-922e-f07b46820a13","resolution":{"observed_at":"2026-07-15T12:11:00.253650Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-07-13T14:08:35.474488Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2604.01904","last_updated":"2026-06-16T07:34:03Z","snapshot_observed_at":"2026-08-06T20:46:41.012304Z","submitted_at":"2026-04-02T11:19:49Z","title":"Combating Data Laundering in LLM Training","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-13T14:08:35.474488Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.01904"},"observation_digest":"sha256:b2c5496b80e4ad7b3c80fa5110474874ea091f97d28ca03f4f7b201d6940e507","observation_id":"354a8fb7-ca85-45fb-9c5c-afa06fd12253","resolution":{"observed_at":"2026-07-13T14:08:35.474488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.01905","last_updated":"2026-05-19T08:31:57Z","snapshot_observed_at":"2026-07-06T22:51:40.181565Z","submitted_at":"2026-04-02T11:22:07Z","title":"From Component Manipulation to System Compromise: Understanding and Detecting Malicious MCP Servers","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-21T10:41:17.307952Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.01905"},"observation_digest":"sha256:cf43128f45a8555d96e6e9eb0b1aa94fe4c4ace90f8c5bc8428ede27c6fbc666","observation_id":"6b597d75-0048-4073-80d3-d50b82301b43","resolution":{"observed_at":"2026-05-21T10:44:08.025728Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.03733","last_updated":"2026-04-04T13:26:17Z","snapshot_observed_at":"2026-08-02T12:48:12.684721Z","submitted_at":"2026-04-04T13:26:17Z","title":"SoK: Blockchain Agent-to-Agent Payments","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-05-13T17:37:50.514729Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.03733"},"observation_digest":"sha256:0c3c762d65d3490a140edc228484f1da6183648270e03416f2857889e83d73ef","observation_id":"0af873ee-45fe-4b87-abca-de01999e2ef5","resolution":{"observed_at":"2026-05-13T17:38:02.478216Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach","version":1},"cited_work":{"arxiv_id":"2504.19951","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2504.19951","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Securing genai multi-agent systems against tool squatting: A zero trust registry-based approach","venue":null,"work_id":"ff57a198-75c6-4476-818a-927078df4460","year":2025},"citing_paper":{"arxiv_id":"2604.04426","last_updated":"2026-04-06T05:15:00Z","snapshot_observed_at":"2026-07-06T22:53:24.585766Z","submitted_at":"2026-04-06T05:15:00Z","title":"ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T20:25:58.113363Z"},"links":{"cited_paper":"/paper/2504.19951","citing_paper":"/paper/2604.04426"},"observation_digest":"sha256:a166d6ce613570f6369127e4ea5b40956228040bbc0b5c4bd392234de071f960","observation_id":"e0277e4d-6285-4784-b52d-84bcfeb043d2","resolution":{"observed_at":"2026-05-10T21:55:52.991265Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2504.19951/citation-record","integrity":"/paper/2504.19951/integrity","json":"/paper/2504.19951/citation-record.json","paper":"/paper/2504.19951"},"outbound":[],"paper":{"arxiv_id":"2504.19951","last_updated":"2025-04-28T16:22:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T15:58:32.775937Z","submitted_at":"2025-04-28T16:22:21Z","title":"Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approach"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 11 inbound Pith citation observations for arXiv:2504.19951."}