{"as_of":"2026-08-16T03:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f5933a74888a85e341d5c19306e76d44133684eb560b3506d386b903addf8fb1","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:33:52.354999Z","state":"measured"},{"denominator":39,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":39,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T12:00:05.330178Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T12:03:23.950682Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"cited_work":{"arxiv_id":"2505.06913","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06913","snapshot_observed_at":"2026-06-29T12:03:23.950682Z","title":"RedTeamLLM: An agentic AI framework for offensive security","venue":null,"work_id":"1e205b5b-ee58-4379-ab06-adcbbf25f8c9","year":2025},"citing_paper":{"arxiv_id":"2604.05719","last_updated":"2026-04-07T11:19:16Z","snapshot_observed_at":"2026-08-11T18:11:23.119647Z","submitted_at":"2026-04-07T11:19:16Z","title":"Hackers or Hallucinators? A Comprehensive Analysis of LLM-Based Automated Penetration Testing","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-10T18:52:57.225878Z"},"links":{"cited_paper":"/paper/2505.06913","citing_paper":"/paper/2604.05719"},"observation_digest":"sha256:4a1bbf7c9cca43ce6d6b1401bcfb81349cf1b1c7eb3c95d44532115d5263a1dd","observation_id":"2ed5c236-14f4-491c-92de-16f4d088dbd8","resolution":{"observed_at":"2026-05-10T23:45:52.800364Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"cited_work":{"arxiv_id":"2505.06913","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06913","snapshot_observed_at":"2026-06-29T12:03:23.950682Z","title":"RedTeamLLM: An agentic AI framework for offensive security","venue":null,"work_id":"1e205b5b-ee58-4379-ab06-adcbbf25f8c9","year":2025},"citing_paper":{"arxiv_id":"2605.01892","last_updated":"2026-05-03T14:15:11Z","snapshot_observed_at":"2026-08-15T01:12:59.769219Z","submitted_at":"2026-05-03T14:15:11Z","title":"CyberAId: AI-Driven Cybersecurity for Financial Service Providers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-09T17:28:03.091189Z"},"links":{"cited_paper":"/paper/2505.06913","citing_paper":"/paper/2605.01892"},"observation_digest":"sha256:f688f937917913b1ef4a9b913970d7037e2c886f74419f67a499998047e4f8db","observation_id":"178a6576-2a25-475e-a7e9-de092d2b9932","resolution":{"observed_at":"2026-05-11T16:21:06.896686Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"cited_work":{"arxiv_id":"2505.06913","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06913","snapshot_observed_at":"2026-06-29T12:03:23.950682Z","title":"RedTeamLLM: An agentic AI framework for offensive security","venue":null,"work_id":"1e205b5b-ee58-4379-ab06-adcbbf25f8c9","year":2025},"citing_paper":{"arxiv_id":"2605.28334","last_updated":"2026-05-31T19:04:51Z","snapshot_observed_at":"2026-08-06T09:08:20.078173Z","submitted_at":"2026-05-27T11:37:18Z","title":"Towards Cybersecurity SuperIntelligence (CSI): What's the best harness for cybersecurity?","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-29T12:00:05.330178Z"},"links":{"cited_paper":"/paper/2505.06913","citing_paper":"/paper/2605.28334"},"observation_digest":"sha256:9845b9e70051dcecb259dbde9de6beb75bd5eee203d8352946475dbeebd017d6","observation_id":"3d73d0f8-0128-4737-bd02-9bc45a8f211c","resolution":{"observed_at":"2026-06-29T12:03:23.952223Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.06913/citation-record","integrity":"/paper/2505.06913/integrity","json":"/paper/2505.06913/citation-record.json","paper":"/paper/2505.06913"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.875284Z","title":"Agentic ai: Au- tonomous intelligence for complex goals–a comprehen- sive survey","venue":null,"work_id":"b0ea2cca-9288-4c64-835f-56b739a79d4c","year":2025},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.206914Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:d3bb4a3a65692e02818048c77f8ec719670e76b7336a1692a5e40140050142f8","observation_id":"13f25711-1d48-4d47-b19b-af510e19a96f","resolution":{"observed_at":"2026-08-15T22:33:52.879829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.850980Z","title":"{PentestGPT}: Evaluating and harnessing large language models for automated penetration testing","venue":null,"work_id":"8712baf9-2f76-481f-9f46-e199267dd0ab","year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.220415Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:56ed1203853d533ce9db904d7d1bff2a4f81b0deaf1f1beb0648ebc9400703a9","observation_id":"301a4f14-9a2b-4388-bb0e-a9e20623b56c","resolution":{"observed_at":"2026-08-15T22:33:52.855094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.05595","last_updated":"2023-10-09T10:31:04Z","snapshot_observed_at":"2026-08-13T05:54:02.077910Z","submitted_at":"2023-10-09T10:31:04Z","title":"Decoding the Threat Landscape : ChatGPT, FraudGPT, and WormGPT in Social Engineering Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.05595","snapshot_observed_at":"2026-08-15T22:33:52.224563Z","title":"Decoding the threat landscape: Chatgpt, fraudgpt, and wormgpt in social engi- neering attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.224563Z"},"links":{"cited_paper":"/paper/2310.05595","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:a82fe383bc5df27d041a9e7b81d733830ef033f9dded96197a4d454ada0f2e5e","observation_id":"9d4477b1-804e-4f38-9a34-483aae2c4489","resolution":{"observed_at":"2026-08-15T22:33:52.224563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06664","last_updated":"2024-02-16T04:02:51Z","snapshot_observed_at":"2026-08-13T04:25:07.273529Z","submitted_at":"2024-02-06T14:46:08Z","title":"LLM Agents can Autonomously Hack Websites","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.06664","snapshot_observed_at":"2026-08-15T22:33:52.234261Z","title":"Llm agents can autonomously hack websites","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.234261Z"},"links":{"cited_paper":"/paper/2402.06664","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:65ca431e378d6601496c9d15d7e0b08cec9012ab93da7697d872001a2511094d","observation_id":"5bd7ad3e-1464-4aba-9233-1fa38b2f53ba","resolution":{"observed_at":"2026-08-15T22:33:52.234261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.18312","last_updated":"2024-10-23T22:46:44Z","snapshot_observed_at":"2026-08-12T22:16:20.136866Z","submitted_at":"2024-10-23T22:46:44Z","title":"Countering Autonomous Cyber Threats","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.18312","snapshot_observed_at":"2026-08-15T22:33:52.238622Z","title":"Countering autonomous cyber threats","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.238622Z"},"links":{"cited_paper":"/paper/2410.18312","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:145001c38b2256860eba3f960b59c60396c7e54ac1a52c2dd4a4c39fad9e55c1","observation_id":"f7cdacd9-c872-43cc-9bf6-c0a7f1b80a1d","resolution":{"observed_at":"2026-08-15T22:33:52.238622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.08422","last_updated":"2024-07-29T11:18:57Z","snapshot_observed_at":"2026-08-13T23:18:48.824860Z","submitted_at":"2024-07-11T12:03:32Z","title":"On the (In)Security of LLM App Stores","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.08422","snapshot_observed_at":"2026-08-15T22:33:52.243074Z","title":"On the (in) security of llm app stores","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.243074Z"},"links":{"cited_paper":"/paper/2407.08422","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:a4185ba6642e8e2c4f88182795367c5c67854421cf7766de03e20c978e53e50f","observation_id":"e6735345-73a8-40f3-8aa7-3c3e719d92d8","resolution":{"observed_at":"2026-08-15T22:33:52.243074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.837755Z","title":"Ai agents and agen- tic systems: A multi-expert analysis","venue":null,"work_id":"441b94fb-1ad0-49e9-b25b-e1c4354d0be9","year":2025},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.249000Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:2380b4dc8af0cf842a3a1207b82d78ece4972c5c9b2ed048fec634e744404777","observation_id":"620f049b-238b-4f9b-8ae4-0afdc738500f","resolution":{"observed_at":"2026-08-15T22:33:52.842327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.824395Z","title":"Toward robust secu- rity orchestration and automated response in security op- erations centers with a hyper-automation approach using agentic ai","venue":null,"work_id":"2556f68b-0f57-4292-85f6-48aaa6e703b8","year":2025},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.253307Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:408d2149499f40aba2aece67dada3a3afea3d5c978d655414c7933407eeb76b3","observation_id":"c04a5cd5-e13f-44e5-a069-069ae106d7d4","resolution":{"observed_at":"2026-08-15T22:33:52.829108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17141","last_updated":"2025-02-21T17:53:09Z","snapshot_observed_at":"2026-08-12T22:17:27.212452Z","submitted_at":"2024-10-22T16:18:41Z","title":"Towards Automated Penetration Testing: Introducing LLM Benchmark, Analysis, and Improvements","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17141","snapshot_observed_at":"2026-08-15T22:33:52.257217Z","title":"Towards automated penetra- tion testing: Introducing llm benchmark, analysis, and im- provements","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.257217Z"},"links":{"cited_paper":"/paper/2410.17141","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:1b2fa5ec715fb6361a2ed5a409fef083475c7dd1e701cb513a5e9313af3ef727","observation_id":"8a0bf164-f41f-4680-9296-0bcc57a662e8","resolution":{"observed_at":"2026-08-15T22:33:52.257217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08596","last_updated":"2023-05-18T05:02:29Z","snapshot_observed_at":"2026-08-14T07:11:14.075198Z","submitted_at":"2023-05-15T12:23:10Z","title":"DarkBERT: A Language Model for the Dark Side of the Internet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.08596","snapshot_observed_at":"2026-08-15T22:33:52.261696Z","title":"Darkbert: A language model for the dark side of the internet","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.261696Z"},"links":{"cited_paper":"/paper/2305.08596","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:6950691dce48bda1553ee21bd235eb21914852bd69cea755351fb74f98070e61","observation_id":"798f0f07-c628-40a7-974d-e5246b1ca133","resolution":{"observed_at":"2026-08-15T22:33:52.261696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14728","last_updated":"2024-10-16T06:40:02Z","snapshot_observed_at":"2026-08-12T22:22:08.900307Z","submitted_at":"2024-10-16T06:40:02Z","title":"Security Threats in Agentic AI System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14728","snapshot_observed_at":"2026-08-15T22:33:52.266454Z","title":"Security threats in agentic ai system","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.266454Z"},"links":{"cited_paper":"/paper/2410.14728","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:8c2070e45e7ade36d221c0b3accaadc6466a4b60523d3b347c84581368665ec3","observation_id":"84e001e6-19d5-4d87-9d20-1f98089c6c7a","resolution":{"observed_at":"2026-08-15T22:33:52.266454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.809179Z","title":"Fun- tuning: Characterizing the vulnerability of proprietary llms to optimization-based prompt injection attacks via the fine-tuning interface","venue":null,"work_id":"0d71986a-130d-42f4-833f-31f25cd9b1af","year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.270653Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:c9351030ccc17bb33af6e0197a5874baa9ecc873b47d308f4e5af50d9b469b3f","observation_id":"a06bd18f-d4b7-403f-90e9-f1d89f87045b","resolution":{"observed_at":"2026-08-15T22:33:52.813297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.274951Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.274951Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:a9f2ce45527a2ebb7a517bf03fb187501dfa089a65431d3501c9562a2fee3f2f","observation_id":"d488c06c-cbaa-4297-b715-0eed13e5a9fa","resolution":{"observed_at":"2026-08-15T22:33:52.274951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.786285Z","title":"Evocodebench: An evolving code generation benchmark with domain-specific evaluations","venue":null,"work_id":"e625358f-5030-4498-90fc-e470d4b033f2","year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.282876Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:98fe1235446066516a65d5dfb48222d126052582eb5eab67d8706f2b0ca85f3e","observation_id":"70b4bac6-c61d-4858-b433-1912961f7448","resolution":{"observed_at":"2026-08-15T22:33:52.791619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.771695Z","title":"Structured chain-of-thought prompting for code genera- tion","venue":null,"work_id":"9544b2af-7ace-4c98-869e-826fee6ab37e","year":2025},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.286983Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:e3629d23bbe6de777dc2f3668741005922836dde09bb17eba30634855f1e4f30","observation_id":"ca03be43-e2bf-4a38-b0bd-2b896172af59","resolution":{"observed_at":"2026-08-15T22:33:52.776045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.758845Z","title":"Artificial intelligence (ai) cybersecurity dimensions: a comprehensive framework for understanding adversarial and offensive ai","venue":null,"work_id":"9f050c18-b627-4af1-903d-976c1a324dd2","year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.290692Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:0a4c89b92f167c235e33570b84e7e51fb7500443efc88fd28073da6855add930","observation_id":"ae4267b0-3c9a-4088-a3bf-79de72cbcf00","resolution":{"observed_at":"2026-08-15T22:33:52.762902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.01778","last_updated":"2024-12-02T18:28:18Z","snapshot_observed_at":"2026-08-14T18:01:24.453040Z","submitted_at":"2024-12-02T18:28:18Z","title":"HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.01778","snapshot_observed_at":"2026-08-15T22:33:52.294731Z","title":"Hacksynth: Llm agent and evaluation framework for autonomous penetration testing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.294731Z"},"links":{"cited_paper":"/paper/2412.01778","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:7caa3125bb01ecf452e9b25f2ee0b645669f0fbd276df3192b7a1aa6ef1d2ecd","observation_id":"934c8b65-e079-4c65-ad74-c0d2456bcabf","resolution":{"observed_at":"2026-08-15T22:33:52.294731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.746912Z","title":"Agentic ai and the cyber arms race","venue":null,"work_id":"e3484b0f-7a02-44bd-95d5-1fd569c54129","year":2025},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.298589Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:1d720cfc25cad6259520cec126bf7a5d317d59f9c6c10118ea182cef4b922de5","observation_id":"91439987-562f-4ed3-a479-5ed70cd4e6a0","resolution":{"observed_at":"2026-08-15T22:33:52.750862Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.05772","last_updated":"2024-04-08T20:42:17Z","snapshot_observed_at":"2026-08-15T21:00:02.840590Z","submitted_at":"2023-11-08T17:59:15Z","title":"ADaPT: As-Needed Decomposition and Planning with Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.05772","snapshot_observed_at":"2026-08-15T22:33:52.302316Z","title":"Adapt: As-needed decomposi- tion and planning with language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.302316Z"},"links":{"cited_paper":"/paper/2311.05772","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:09f8f3708061070add81110a82356abb8ae02e305101c09f4410a30fa2a6aab5","observation_id":"165e20cd-57ab-4907-9f7f-02843cd0f495","resolution":{"observed_at":"2026-08-15T22:33:52.302316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07927","last_updated":"2025-03-16T06:23:34Z","snapshot_observed_at":"2026-08-05T17:55:26.008016Z","submitted_at":"2024-02-05T19:49:13Z","title":"A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07927","snapshot_observed_at":"2026-08-15T22:33:52.306132Z","title":"A systematic survey of prompt engineering in large language models: Techniques and applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.306132Z"},"links":{"cited_paper":"/paper/2402.07927","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:56416615c49a98db8b15d10702ebd4e433b89e0d15c48241e0d488b6af5d9f8c","observation_id":"1c7dfe44-748e-4765-93b6-8e087731dc71","resolution":{"observed_at":"2026-08-15T22:33:52.306132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.732729Z","title":"Practices for governing agentic ai sys- tems","venue":null,"work_id":"77f7e274-1f05-44d2-976a-92fe81a41646","year":2023},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.310759Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:63b7605ddfbabab9cd1d50686aedf58e3677c4aa78408d541bcf944025cd2a37","observation_id":"cb47a308-7a52-420b-9300-39bc19784d04","resolution":{"observed_at":"2026-08-15T22:33:52.736884Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.05185","last_updated":"2025-05-29T23:48:08Z","snapshot_observed_at":"2026-08-12T22:05:15.327470Z","submitted_at":"2024-11-07T21:10:39Z","title":"PentestAgent: Incorporating LLM Agents to Automated Penetration Testing","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.05185","snapshot_observed_at":"2026-08-15T22:33:52.314821Z","title":"Pentestagent: Incorpo- rating llm agents to automated penetration testing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.314821Z"},"links":{"cited_paper":"/paper/2411.05185","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:57f9eedf52e16595dc67e819121199ff3033d9fb7b7793cc44b754e52a67e438","observation_id":"0e2e6e25-b83d-4066-b6ec-14c83f347d61","resolution":{"observed_at":"2026-08-15T22:33:52.314821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14564","last_updated":"2023-05-23T23:06:04Z","snapshot_observed_at":"2026-08-13T11:35:05.204757Z","submitted_at":"2023-05-23T23:06:04Z","title":"PEARL: Prompting Large Language Models to Plan and Execute Actions Over Long Documents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.14564","snapshot_observed_at":"2026-08-15T22:33:52.318771Z","title":"Pearl: Prompting large language models to plan and execute actions over long documents","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.318771Z"},"links":{"cited_paper":"/paper/2305.14564","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:037c6e04447b34df2af4926c6ac7e20470724dc0e73e9db77cec4033c543de4a","observation_id":"21582dec-fad8-4891-955a-d43188fa7b30","resolution":{"observed_at":"2026-08-15T22:33:52.318771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05561","last_updated":"2024-09-30T10:17:12Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-01-10T22:07:21Z","title":"TrustLLM: Trustworthiness in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05561","snapshot_observed_at":"2026-08-15T22:33:52.322665Z","title":"Trustllm: Trust- worthiness in large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.322665Z"},"links":{"cited_paper":"/paper/2401.05561","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:669d796ca4d423543a12caa57c1537e379d629f0176392c5fb8b9bfa3fbc813a","observation_id":"021770e7-17e6-4a4c-9142-abb11aa60c08","resolution":{"observed_at":"2026-08-15T22:33:52.322665Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.01605","last_updated":"2024-09-06T18:17:07Z","snapshot_observed_at":"2026-08-13T19:07:08.021808Z","submitted_at":"2024-08-02T23:47:27Z","title":"CYBERSECEVAL 3: Advancing the Evaluation of Cybersecurity Risks and Capabilities in Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.01605","snapshot_observed_at":"2026-08-15T22:33:52.326946Z","title":"Cyberseceval 3: Advancing the eval- uation of cybersecurity risks and capabilities in large lan- guage models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.326946Z"},"links":{"cited_paper":"/paper/2408.01605","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:30d12a138b24ff418ef93c7031b09726a8446bf8ccd41ee8dc74e86f1b788627","observation_id":"fe0790fe-70cf-47cd-b4d2-7eec7fa5ad69","resolution":{"observed_at":"2026-08-15T22:33:52.326946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.11171","last_updated":"2023-03-07T17:57:37Z","snapshot_observed_at":"2026-08-16T01:49:22.176843Z","submitted_at":"2022-03-21T17:48:52Z","title":"Self-Consistency Improves Chain of Thought Reasoning in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.11171","snapshot_observed_at":"2026-08-15T22:33:52.331077Z","title":"Self-consistency improves chain of thought reasoning in language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.331077Z"},"links":{"cited_paper":"/paper/2203.11171","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:fb3048d4251885e4c347b29c5b4e7b4ac7af2125a1bbdaaeef0a1309c39432af","observation_id":"7bc64968-a760-42bc-aa4f-ead5edc28071","resolution":{"observed_at":"2026-08-15T22:33:52.331077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.720459Z","title":"Tdag: A multi-agent framework based on dynamic task decomposition and agent genera- tion","venue":null,"work_id":"00f95638-87e9-443b-b518-7da599509336","year":2025},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.339682Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:249b22d7f54c71d658c9cc419c8e36c93940e733fe48daeb914acb129df67ef8","observation_id":"01c9130b-3477-48ab-9af9-7277dede907f","resolution":{"observed_at":"2026-08-15T22:33:52.724712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.343190Z","title":"Chain-of-thought prompting elicits reasoning in large language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.343190Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:c5f1c68277a92471e0adb5e6d54160562c8b55fa663ef00ca9bedc09d3882296","observation_id":"fee21d8c-31c0-40ce-86d9-270e7cc3ed66","resolution":{"observed_at":"2026-08-15T22:33:52.343190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01038","last_updated":"2024-03-02T00:10:45Z","snapshot_observed_at":"2026-08-13T04:05:11.219568Z","submitted_at":"2024-03-02T00:10:45Z","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.01038","snapshot_observed_at":"2026-08-15T22:33:52.347166Z","title":"Autoattacker: A large language model guided system to implement automatic cyber-attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.347166Z"},"links":{"cited_paper":"/paper/2403.01038","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:614e7ddb5d7797b2d664416e64916eabe55a89bb85c717c97aae2c5f98f3a6e4","observation_id":"7dcbffbd-649b-45b9-b129-2fa9f6419b1a","resolution":{"observed_at":"2026-08-15T22:33:52.347166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.697930Z","title":"A survey on large language model (llm) security and privacy: The good, the bad, and the ugly","venue":null,"work_id":"973b78b1-ab96-4ee4-9522-a583e8547eee","year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.351216Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:f1238d519986c2f6806a68c5574e4cd5d1c3972018a2042fd2da17aa1ed7c4eb","observation_id":"f114f6e3-4996-4d37-b12c-94b77cfbca6e","resolution":{"observed_at":"2026-08-15T22:33:52.704492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03493","last_updated":"2022-10-07T12:28:21Z","snapshot_observed_at":"2026-07-06T14:01:50.333970Z","submitted_at":"2022-10-07T12:28:21Z","title":"Automatic Chain of Thought Prompting in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03493","snapshot_observed_at":"2026-08-15T22:33:52.354999Z","title":"Automatic chain of thought prompting in large language models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.354999Z"},"links":{"cited_paper":"/paper/2210.03493","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:1998198900e82047f8dda872b1db61e39e7c9e409301b08d59754787d76abe83","observation_id":"cec682d3-bf0d-4d8d-9080-08f22fc33b02","resolution":{"observed_at":"2026-08-15T22:33:52.354999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04474","last_updated":"2024-07-29T20:21:37Z","snapshot_observed_at":"2026-08-13T05:07:47.675809Z","submitted_at":"2023-12-07T17:51:43Z","title":"Chain of Code: Reasoning with a Language Model-Augmented Code Emulator","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04474","snapshot_observed_at":"2026-08-15T22:33:52.278924Z","title":"Chain of code: Reasoning with a language model-augmented code emulator","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.278924Z"},"links":{"cited_paper":"/paper/2312.04474","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:cfbf6301c8c22767eafdf59ab38f903143fffb03792fc79d7dd4e5f912dc8ffa","observation_id":"b1a043a5-4cba-40fb-b925-188a291bd12b","resolution":{"observed_at":"2026-08-15T22:33:52.278924Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10178","last_updated":"2025-01-21T15:11:41Z","snapshot_observed_at":"2026-08-15T19:09:19.690081Z","submitted_at":"2024-02-15T18:27:37Z","title":"TDAG: A Multi-Agent Framework based on Dynamic Task Decomposition and Agent Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10178","snapshot_observed_at":"2026-08-15T22:33:52.335624Z","title":"Tdag: A multi-agent framework based on dynamic task decomposition and agent genera- tion","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.335624Z"},"links":{"cited_paper":"/paper/2402.10178","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:c6e78bcd2d3af21625d4bbe55c91e5a36e50d64eba060ee94569900b4d2e6008","observation_id":"a247f233-06a2-41c3-b00a-6936220a6bc1","resolution":{"observed_at":"2026-08-15T22:33:52.335624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.08144","last_updated":"2024-04-17T04:34:39Z","snapshot_observed_at":"2026-08-15T19:39:28.669101Z","submitted_at":"2024-04-11T22:07:19Z","title":"LLM Agents can Autonomously Exploit One-day Vulnerabilities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.08144","snapshot_observed_at":"2026-08-15T22:33:52.229693Z","title":"Llm agents can au- tonomously exploit one-day vulnerabilities.arXiv preprint arXiv:2404.08144,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.229693Z"},"links":{"cited_paper":"/paper/2404.08144","citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:62be520924e6a20701fec3ef367ead181613dc9e3e4bac00884b793ce021e340","observation_id":"3415ba6d-de8d-45d4-b3e2-d915ee0b72d1","resolution":{"observed_at":"2026-08-15T22:33:52.229693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.216221Z","title":"Breaking down the defenses: A comparative survey of attacks on large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.216221Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:314a4d12ac700f2e71c0998423e185cdfd0651057f0d4d5692d85c50ebd84bb8","observation_id":"dd4c45c7-06d3-47d0-8276-e4219afbac68","resolution":{"observed_at":"2026-08-15T22:33:52.216221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:33:52.862893Z","title":"When do program-of-thought works for reasoning? In Proceed- ings of the AAAI Conference on Artificial Intelligence, vol- ume 38, pages 17691–17699,","venue":null,"work_id":"5f2b7df7-0b73-40a9-aca6-da35bbaa4b83","year":2024},"citing_paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-15T22:33:52.211938Z"},"links":{"citing_paper":"/paper/2505.06913"},"observation_digest":"sha256:1daa86fcd6d3e67b405300c3fdcec586506306bd4685a54a93fce172662e979e","observation_id":"6931b171-cbe6-49bf-ab82-b211bfc220b9","resolution":{"observed_at":"2026-08-15T22:33:52.866966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.06913","last_updated":"2025-05-11T09:19:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T22:27:20.705590Z","submitted_at":"2025-05-11T09:19:10Z","title":"RedTeamLLM: an Agentic AI framework for offensive security"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":0,"verified_fuzzy":13},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 3 inbound Pith citation observations for arXiv:2505.06913."}