{"as_of":"2026-08-15T14:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e48258fceab75cfaa95d8693b75df3563f45321ef19f630faa18344f70a84fcb","coverage":[{"denominator":32,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":32,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:42:38.774308Z","state":"measured"},{"denominator":33,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":33,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T17:40:14.733882Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T06:20:59.355124Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"cited_work":{"arxiv_id":"2505.17861","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.17861","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b47d6b4a-1de4-471a-8ba1-5144bed599a8","year":2025},"citing_paper":{"arxiv_id":"2604.08224","last_updated":"2026-04-09T13:19:41Z","snapshot_observed_at":"2026-08-02T22:56:00.067549Z","submitted_at":"2026-04-09T13:19:41Z","title":"Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineering","version":1},"reference_index":85,"source":"arxiv_source","source_observed_at":"2026-05-10T17:40:14.733882Z"},"links":{"cited_paper":"/paper/2505.17861","citing_paper":"/paper/2604.08224"},"observation_digest":"sha256:2b56c68ff7cb9f0a4d328cdaececf1a68f9683a47602bd7df520735ff013ecff","observation_id":"4b9e5700-0258-42d3-85b0-7291d12574ac","resolution":{"observed_at":"2026-05-11T06:20:59.359921Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.17861/citation-record","integrity":"/paper/2505.17861/integrity","json":"/paper/2505.17861/citation-record.json","paper":"/paper/2505.17861"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:41.578858Z","title":"From seo to geo: How agencies are navigat- ing llm-driven search","venue":null,"work_id":"8efd8f8e-8f19-4421-afbc-e512072479e2","year":null},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.245517Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:dc2663fa13b444b682cedab7a2f1bbd8f8a74ae5bf03286b1d07b311de9dde2f","observation_id":"2b2c09de-5a7c-4f93-8e8b-c81cb79882d7","resolution":{"observed_at":"2026-08-07T14:42:41.676143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:41.216507Z","title":"Gatekeeping: A critical review","venue":null,"work_id":"9e232700-1866-40ef-834a-777624eeaafc","year":2009},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.504631Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:063a3407b12a0355145c48ffea67e101e7a928afd269e5ad000ea1322b82d0f1","observation_id":"0c7ef86f-09f8-49d5-b17b-3dfd09a69a17","resolution":{"observed_at":"2026-08-07T14:42:41.266893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T14:42:36.620074Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.620074Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:b374097b84184dfb36008cffa726c679d342cc8505d3bd90cb916e5dadba8c10","observation_id":"9f5c4307-9121-4ec8-83ab-86af83737893","resolution":{"observed_at":"2026-08-07T14:42:36.620074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13053","last_updated":"2025-08-06T07:04:43Z","snapshot_observed_at":"2026-08-14T15:57:13.272984Z","submitted_at":"2025-02-18T17:01:28Z","title":"Evaluating the Robustness of Multimodal Agents Against Active Environmental Injection Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13053","snapshot_observed_at":"2026-08-07T14:42:36.762901Z","title":"Aeia-mn: Evaluating the robustness of multimodal llm-powered mobile agents against active environmental injection attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.762901Z"},"links":{"cited_paper":"/paper/2502.13053","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:c648ef26a2f88815644cbbeb822ee1b57547dedc43bb9d518e30c0ae0fd70833","observation_id":"7d46fe16-bfa6-40f4-9786-69e5f7410cb7","resolution":{"observed_at":"2026-08-07T14:42:36.762901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:41.053556Z","title":"Exploring the adversarial robustness of clip for ai-generated image detection","venue":null,"work_id":"215b23bb-0310-409d-a1d5-95c43c9a5f44","year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.809178Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:ae63d1783e21b5f4f2cd975b49c85ba4ebde008361f4164e85c6abbb7817712c","observation_id":"579dcae6-f024-4220-a634-0486eb57cf0f","resolution":{"observed_at":"2026-08-07T14:42:41.146114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.902144Z","title":"Multi-agent systems: A survey","venue":null,"work_id":"c5736cb5-8823-4510-aaf0-c1e432cf1856","year":2018},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.898883Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:6ccdf7f2d8bec575ed3ecd17f54c397444d2e647eaf2db22ed0487dc031638c7","observation_id":"e6758710-9f0a-42b5-81cb-1891ec771ad2","resolution":{"observed_at":"2026-08-07T14:42:40.981986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:36.977320Z","title":"Elshoush","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.977320Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:f37eae02a4d4c32630152985f059e4daabc102c16a7e443461baac299352f3f3","observation_id":"30aa3551-0db0-4627-8802-57cc1f79fe8a","resolution":{"observed_at":"2026-08-07T14:42:36.977320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.773107Z","title":"Clip-guided generative networks for transferable targeted adversarial attacks","venue":null,"work_id":"3a44389c-535a-4911-9b37-4b9c1e64e51b","year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.042695Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:dca47c34f4497a7cfa241b686be88a2308653e28da22f691a86b93bb77893071","observation_id":"ee35236d-2108-49e7-b4d7-6692f6101edd","resolution":{"observed_at":"2026-08-07T14:42:40.808679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.04345","last_updated":"2025-06-19T11:55:30Z","snapshot_observed_at":"2026-08-10T20:04:53.381506Z","submitted_at":"2025-05-07T11:45:38Z","title":"Build Agent Advocates, Not Platform Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.04345","snapshot_observed_at":"2026-08-07T14:42:37.129735Z","title":"Resist platform-controlled ai agents and champion user-centric agent advocates","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.129735Z"},"links":{"cited_paper":"/paper/2505.04345","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:ded6c5db0d746c00162c291803540146cc21520007175a78e46faa935bc9b57a","observation_id":"0dadd785-617b-4413-86fa-ddaa31769ed2","resolution":{"observed_at":"2026-08-07T14:42:37.129735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-08-15T05:53:59.943730Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-08-07T14:42:37.234824Z","title":"Certifying llm safety against adversarial prompting","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.234824Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:9c36c216d2f4bcd069aa1d59f273cb9c95db94fe8fd24c7105d831a26ff3eb0d","observation_id":"f3a082e9-bc92-40ec-abb7-0c054b0d020d","resolution":{"observed_at":"2026-08-07T14:42:37.234824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.668162Z","title":"Amazon statistics you should know in 2024","venue":null,"work_id":"5bfd9b90-7c36-4679-ad9d-962cc11d3457","year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.313723Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:b690cce73d1e44e0e5e302dfffe006845499d8538b9d060b933c5409bf6dda06","observation_id":"e10cd6b7-7dd3-4c75-97cc-58291d7e0220","resolution":{"observed_at":"2026-08-07T14:42:40.713297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.500890Z","title":"Forces behind food habits and methods of change","venue":null,"work_id":"3dd13c04-16be-460a-a3d3-d3544f6b9585","year":1943},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.382642Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:f9846484fba3408967bf0883bb6aee989ccd29d10b9b23d357fb9c9c4b2d2b9d","observation_id":"b1e15976-9fe5-4456-b090-21c76996633c","resolution":{"observed_at":"2026-08-07T14:42:40.595893Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-13T14:04:19.412614Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-07T14:42:37.458144Z","title":"Eia: Environmental injection attack on generalist web agents for privacy leakage","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.458144Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:8372f685326910777cdcf170dc61ccb7f16820c3c8d5b620cbe54f6d07d9b1ec","observation_id":"45cb0ba6-0147-4422-a558-baca1bd18165","resolution":{"observed_at":"2026-08-07T14:42:37.458144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02544","last_updated":"2025-09-05T09:21:10Z","snapshot_observed_at":"2026-08-15T08:35:16.406920Z","submitted_at":"2024-08-05T15:16:22Z","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02544","snapshot_observed_at":"2026-08-07T14:42:37.544967Z","title":"Caution for the environment: Multimodal agents are susceptible to environmental distractions","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.544967Z"},"links":{"cited_paper":"/paper/2408.02544","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:a6211234205673e43a96991fc52fa53c984e4b3688e441630dff01c612209dbe","observation_id":"603f7876-4bac-4705-bd28-007fd556fde5","resolution":{"observed_at":"2026-08-07T14:42:37.544967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.397462Z","title":"Future internet and digital ecosystems","venue":null,"work_id":"45854b6f-b89a-4a8a-8fed-100a9e7e55b9","year":2021},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.635147Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:7d071b55cff40107e65a0f0294e5268794e9fa41121237969adb0a7dfc82c904","observation_id":"15727679-ee79-4228-8675-93d95234f6bb","resolution":{"observed_at":"2026-08-07T14:42:40.443991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.291177Z","title":"Shoemaker and Timothy P","venue":null,"work_id":"2aad224d-d3ce-40c5-beda-e4314c4111a4","year":2009},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.731122Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:20b4ba5f25bc7a2a1adece6187117c00e40107d532f074956abca42ae4892f5f","observation_id":"78a8aa81-50c6-4b22-925e-253929bda273","resolution":{"observed_at":"2026-08-07T14:42:40.338550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:40.162566Z","title":"Advertising revenue of google from 2001 to 2023","venue":null,"work_id":"ab1d0cdf-0e2e-410f-94dc-86386efed1e1","year":2001},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.828582Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:5aa218b06c139d12781d4957865e7d8061faead48782d5fb7d830e332568c27a","observation_id":"5f2d040b-a55b-4ca1-be2d-b8a478761cfc","resolution":{"observed_at":"2026-08-07T14:42:40.228287Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.03007","last_updated":"2024-06-05T07:14:28Z","snapshot_observed_at":"2026-08-12T23:49:52.527935Z","submitted_at":"2024-06-05T07:14:28Z","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.03007","snapshot_observed_at":"2026-08-07T14:42:37.913404Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.913404Z"},"links":{"cited_paper":"/paper/2406.03007","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:f13ead9bbe7b2ea025ef36ba92e285b8035a692eb307c204d9c5fa7ddbc315a5","observation_id":"bfc370ec-1bf4-4463-a693-eefd55a130a9","resolution":{"observed_at":"2026-08-07T14:42:37.913404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19820","last_updated":"2025-03-28T00:37:10Z","snapshot_observed_at":"2026-08-12T23:38:20.655752Z","submitted_at":"2025-02-27T06:49:16Z","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.19820","snapshot_observed_at":"2026-08-07T14:42:37.996832Z","title":"Foot-in-the-door: A multi-turn jailbreak for llms, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:37.996832Z"},"links":{"cited_paper":"/paper/2502.19820","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:388788544fd0b564cf53b5566bdebf369f2399d7dbec8f7e91d2f1c6b01aba53","observation_id":"86440856-f42c-47b1-ac4b-918805b7ae7b","resolution":{"observed_at":"2026-08-07T14:42:37.996832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:39.988169Z","title":"Dissecting adversarial robustness of multimodal lm agents","venue":null,"work_id":"14a4de52-872e-46ec-9aaa-4f52899c109f","year":null},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.039981Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:a79808f9cf5fe0560948a05cf9b66121c4c33d5724294ca8cf9afe32d9163661","observation_id":"3f04a8b3-649b-4913-b074-f306e262cdee","resolution":{"observed_at":"2026-08-07T14:42:40.068742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-13T15:05:08.682924Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-07T14:42:38.101980Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.101980Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:8d6041ee30f57108c2e3a5a50caa5fd9f7dd023a4b99e91d95f72cbafc065408","observation_id":"9d2a9354-7c18-415f-a0b3-f555568db69a","resolution":{"observed_at":"2026-08-07T14:42:38.101980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:39.801308Z","title":"Watch out for your agents! investigating backdoor threats to llm-based agents","venue":null,"work_id":"6ed5e706-9ba4-49c9-a84c-272ac20c08b9","year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.178109Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:c1aee5f549b3e9fc0d041932386369f8a2b1e9a1d661223889ea47f68b8386a1","observation_id":"678edab7-4c6f-421d-81a2-a37b8da780ff","resolution":{"observed_at":"2026-08-07T14:42:39.894716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.16736","last_updated":"2025-06-21T17:39:43Z","snapshot_observed_at":"2026-08-14T00:24:06.312158Z","submitted_at":"2025-04-23T14:07:26Z","title":"A Survey of AI Agent Protocols","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.16736","snapshot_observed_at":"2026-08-07T14:42:38.256289Z","title":"A survey of ai agent protocols","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.256289Z"},"links":{"cited_paper":"/paper/2504.16736","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:3d0c292edef5235a8fd57e1181c14202f2c28194c1d378d7ef4f9bdad32a4aaf","observation_id":"62cedc44-2bb7-4b86-9e8b-242d17c9a194","resolution":{"observed_at":"2026-08-07T14:42:38.256289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.17421","last_updated":"2023-10-11T05:07:37Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-29T17:34:51Z","title":"The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.17421","snapshot_observed_at":"2026-08-07T14:42:38.276256Z","title":"The dawn of lmms: Preliminary explorations with gpt-4v(ision), 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.276256Z"},"links":{"cited_paper":"/paper/2309.17421","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:fef5f394f292c0d6fd1198680193e29b713f33cb0eb62f2c04cb9ab791e3aad4","observation_id":"9d548796-1c20-41e0-aef4-1ea4611b31e0","resolution":{"observed_at":"2026-08-07T14:42:38.276256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:39.650410Z","title":"Infecting llm agents via generalizable adversarial attack","venue":null,"work_id":"fe91e78f-3123-4dc4-b13b-ad752ffdb18b","year":null},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.361409Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:47e3693fa8bf28bbd073be7fd80a7b5a89bf079bb78d820366c7043e46a07e00","observation_id":"36fc0658-2c08-4d52-996a-15fcd73dd633","resolution":{"observed_at":"2026-08-07T14:42:39.726223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:39.537600Z","title":"Infecting LLM agents via generalizable adversarial attack","venue":null,"work_id":"c24bfa37-5f0b-4bc3-80e7-52c24db51089","year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.410644Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:64803e2bbf1611c6a30d93aee5cb9dfbaf25cf7d009f062c8208fa052d659c53","observation_id":"86de7c74-515b-45a6-a57b-f7b619b4d408","resolution":{"observed_at":"2026-08-07T14:42:39.590312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-07T14:42:38.501098Z","title":"Agent security bench (asb): Formalizing and benchmarking attacks and defenses in llm-based agents, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.501098Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:1dbb311923b53fd824dad1f10b6e416196ab1c2b144e7a80174b2c376fb75a3d","observation_id":"22238714-11bd-4127-889b-d1300aafd41c","resolution":{"observed_at":"2026-08-07T14:42:38.501098Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09713","last_updated":"2025-02-23T03:23:46Z","snapshot_observed_at":"2026-08-13T06:54:16.131719Z","submitted_at":"2024-10-13T03:45:24Z","title":"Agentic Information Retrieval","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09713","snapshot_observed_at":"2026-08-07T14:42:38.587824Z","title":"Agentic information retrieval","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.587824Z"},"links":{"cited_paper":"/paper/2410.09713","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:6675a75dba26b7eec18c539be8b25d95b420ccb8e39be879197b691f3147aeb9","observation_id":"0c541b81-f09b-4a46-a46e-7c70374fa605","resolution":{"observed_at":"2026-08-07T14:42:38.587824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-15T01:41:48.210282Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-07T14:42:38.645474Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.645474Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:3c2bacea4d1bf50fa7400dd3aeb6847eecfe43fca7075593920eed60658c138b","observation_id":"a8bb3688-7ea9-44aa-b4e6-28b1a804b001","resolution":{"observed_at":"2026-08-07T14:42:38.645474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11038","last_updated":"2025-04-15T10:00:01Z","snapshot_observed_at":"2026-08-13T20:20:18.525754Z","submitted_at":"2025-04-15T10:00:01Z","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11038","snapshot_observed_at":"2026-08-07T14:42:38.683682Z","title":"Qava: Query-agnostic visual attack to large vision-language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.683682Z"},"links":{"cited_paper":"/paper/2504.11038","citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:b66c45cf4494448218afdb5b3a29fa388a4db4c83dc5ef79c898eac5b04795af","observation_id":"4a4d5c10-e394-457b-b052-811a84c24ac0","resolution":{"observed_at":"2026-08-07T14:42:38.683682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:39.368140Z","title":"Data poisoning attacks on multi-task relationship learning","venue":null,"work_id":"9403148c-b021-4f65-b0ed-17bac8c31be8","year":2018},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:38.774308Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:50865083970fa65be866bf433b2ab55c5cc95844039151c9b738a9b7e6723cf7","observation_id":"3320d65b-2632-434f-8553-443e9fc38ce6","resolution":{"observed_at":"2026-08-07T14:42:39.444046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:42:41.383860Z","title":null,"venue":null,"work_id":"dfd5cecb-5c7c-401b-8a08-8794794e89cf","year":2025},"citing_paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T14:42:36.329840Z"},"links":{"citing_paper":"/paper/2505.17861"},"observation_digest":"sha256:7782f448927921d8aa070c9e43795fa4beed5c0be3846db3f298c4193f32349f","observation_id":"c2e7949e-aea6-492d-a261-4ff9f255506e","resolution":{"observed_at":"2026-08-07T14:42:41.487870Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.17861","last_updated":"2025-05-23T13:13:44Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-08T15:07:52.945830Z","submitted_at":"2025-05-23T13:13:44Z","title":"Superplatforms Have to Attack AI Agents"},"reference_resolution":{"displayed":32,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":16,"verified_exact":0,"verified_fuzzy":15},"total_outbound_references":32},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 1 inbound Pith citation observation for arXiv:2505.17861."}