{"as_of":"2026-08-10T20:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fd3bd7400804256b177e298ccbcb5525813a693078aa8ba01cf879c88dd63dfd","coverage":[{"denominator":21,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":21,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:29:54.026039Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T09:54:57.493112Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-03T09:54:57.493112Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.12349","last_updated":"2026-07-15T15:32:11Z","snapshot_observed_at":"2026-08-09T21:35:22.237317Z","submitted_at":"2026-01-18T10:54:54Z","title":"Mind the Gap: Action Rebinding Attacks against Android GUI Agents","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T09:54:57.493112Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2601.12349"},"observation_digest":"sha256:d2f8af868b6cddf1b3743d276788fbe77ad62266d4bb48864cc76ea946ef00d9","observation_id":"1eabc1c6-2842-458f-aa59-1c8aaf26e4a1","resolution":{"observed_at":"2026-08-03T09:54:57.493112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":"2507.05445","doi":"10.48550/arxiv.2507.05445","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematization of security vulnerabilities in computer use agents","venue":"ArXiv.org","work_id":"f6d8d62b-ac2a-49ee-b6ba-b4b11b3f7819","year":2025},"citing_paper":{"arxiv_id":"2605.07110","last_updated":"2026-05-08T01:38:46Z","snapshot_observed_at":"2026-07-06T23:19:30.387067Z","submitted_at":"2026-05-08T01:38:46Z","title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","version":1},"reference_index":153,"source":"pdf_text","source_observed_at":"2026-05-11T01:15:19.239355Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2605.07110"},"observation_digest":"sha256:fb9cd97f670b6d588fad8f12f169a27df35c9253de0f983625c57a8c4f3b1294","observation_id":"21cc77c1-16e6-4650-ab73-9dd794afba19","resolution":{"observed_at":"2026-05-11T04:35:55.938663Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":"2507.05445","doi":"10.48550/arxiv.2507.05445","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematization of security vulnerabilities in computer use agents","venue":"ArXiv.org","work_id":"f6d8d62b-ac2a-49ee-b6ba-b4b11b3f7819","year":2025},"citing_paper":{"arxiv_id":"2606.05233","last_updated":"2026-06-03T01:21:59Z","snapshot_observed_at":"2026-08-03T04:28:49.622809Z","submitted_at":"2026-06-03T01:21:59Z","title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T06:22:03.848058Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2606.05233"},"observation_digest":"sha256:d33995ef7e3927dedbdbfcb5a3f4f35a59e6a3ec928a8abaed2a2e8a9b712536","observation_id":"669e3427-683f-4b85-9a42-cb778c125cd9","resolution":{"observed_at":"2026-07-02T08:06:48.215369Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"cited_work":{"arxiv_id":"2507.05445","doi":"10.48550/arxiv.2507.05445","metadata_source":"arxiv_reference","pith_arxiv_id":"2507.05445","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematization of security vulnerabilities in computer use agents","venue":"ArXiv.org","work_id":"f6d8d62b-ac2a-49ee-b6ba-b4b11b3f7819","year":2025},"citing_paper":{"arxiv_id":"2606.10749","last_updated":"2026-06-09T12:01:07Z","snapshot_observed_at":"2026-07-31T21:35:18.696472Z","submitted_at":"2026-06-09T12:01:07Z","title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-06-27T12:55:22.831264Z"},"links":{"cited_paper":"/paper/2507.05445","citing_paper":"/paper/2606.10749"},"observation_digest":"sha256:1a2e8803f10aa923944c947a0a20bd098c2154ba62b03a189371f3bf47c7c97c","observation_id":"efbdd2d8-8a16-4267-99db-810cf7ae5262","resolution":{"observed_at":"2026-06-27T13:20:57.086752Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.05445/citation-record","integrity":"/paper/2507.05445/integrity","json":"/paper/2507.05445/citation-record.json","paper":"/paper/2507.05445"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:57.347917Z","title":"Osworld: Benchmarking multimodal agents for open-ended tasks in real computer environments,","venue":null,"work_id":"aead908f-94f1-48e6-a9fe-6727c53ea270","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.427889Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:a2be9ae0e3743dc32f42306b9024d4d035c4a87a07a6416dc4340ad3728080e0","observation_id":"2c5ae4a9-0f4a-4d18-9edc-59d9b2993dc7","resolution":{"observed_at":"2026-08-06T19:29:57.504280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:57.074540Z","title":"Operator system card,","venue":null,"work_id":"cee15fe6-a13e-46f5-8e46-30009e351253","year":2025},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.525962Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:052578c0df3ccd1ea5338d6bb4ffee515f1b1f4f119539a85df934923f504d54","observation_id":"98314f42-e14d-4148-a681-3ac05e9d1eaa","resolution":{"observed_at":"2026-08-06T19:29:57.206439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:56.817790Z","title":"Developing a computer use model,","venue":null,"work_id":"851f13b8-7d5f-4f82-aee5-32467898927b","year":2025},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.634118Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:13a86a0bbcc091a022bc42dcee1ca801352715d6f92df905900ec963578f9e38","observation_id":"e00b2d44-7333-498f-bb0b-8511f017eb28","resolution":{"observed_at":"2026-08-06T19:29:56.964829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:56.528068Z","title":"Project Astra: Multimodal AI Assistants,","venue":null,"work_id":"190d5116-2d66-4a3a-b451-4fc7f503d707","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.794479Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:e382ed2f22b71b1c976f14551b0c35f34811e1fbaef7e8702721f5597b3a513b","observation_id":"396a6059-6148-4ef6-b660-eeb21578bcc0","resolution":{"observed_at":"2026-08-06T19:29:56.655400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.12345","last_updated":"2023-07-23T14:57:44Z","snapshot_observed_at":"2026-08-09T16:15:22.701377Z","submitted_at":"2023-07-23T14:57:44Z","title":"Tell me, what are you most afraid of? Exploring the Effects of Agent Representation on Information Disclosure in Human-Chatbot Interaction","version":1},"cited_work":{"arxiv_id":"2307.12345","doi":null,"metadata_source":"pith","pith_arxiv_id":"2307.12345","snapshot_observed_at":"2026-08-06T19:29:54.272830Z","title":"Tell me, what are you most afraid of? Exploring the Effects of Agent Representation on Information Disclosure in Human-Chatbot Interaction","venue":"cs.HC","work_id":"ac3a53f8-05b5-47bd-9f87-557532deeab4","year":2023},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:51.903812Z"},"links":{"cited_paper":"/paper/2307.12345","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:3015c6a02815df608eefba1584f58e9c8b21fb942d6f9daa10ea6e095e3acbd5","observation_id":"178ed3ab-35c5-4cf8-8bfb-9d1d531330c4","resolution":{"observed_at":"2026-08-06T19:29:54.389245Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:56.276683Z","title":"Hello gpt-4o,","venue":null,"work_id":"2c844a2d-76e6-4ff8-9d6b-e3038844b860","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.036861Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:4a71b55f8cd8fba19ed6175e9e0f32af35d21b5ee1dcad28d611162fd8df14b7","observation_id":"1573ad1d-0fd5-4f94-8be9-da1b4eb335b9","resolution":{"observed_at":"2026-08-06T19:29:56.390520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-06T19:29:52.169152Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.169152Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:e1747957a968a288ca10de2c096897851e88dbe37f81a9b23bb5f93edaefadc3","observation_id":"85b7d1bc-eae4-4750-85ac-b64822e7cbcf","resolution":{"observed_at":"2026-08-06T19:29:52.169152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.11366","last_updated":"2023-10-10T05:21:45Z","snapshot_observed_at":"2026-08-10T17:44:16.302071Z","submitted_at":"2023-03-20T18:08:50Z","title":"Reflexion: Language Agents with Verbal Reinforcement Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.11366","snapshot_observed_at":"2026-08-06T19:29:52.269959Z","title":"Reflexion: Lan- guage agents with verbal reinforcement learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.269959Z"},"links":{"cited_paper":"/paper/2303.11366","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:69d8495ec5ab1d2206203899fb8e240df428ef75938b6128209fc0dc9a21c54f","observation_id":"fdb3d9f0-2aa6-4218-8a1e-8f3ee26ff203","resolution":{"observed_at":"2026-08-06T19:29:52.269959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03286","last_updated":"2022-02-07T15:22:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-02-07T15:22:17Z","title":"Red Teaming Language Models with Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03286","snapshot_observed_at":"2026-08-06T19:29:52.397415Z","title":"Red teaming language models with language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.397415Z"},"links":{"cited_paper":"/paper/2202.03286","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:6d671788fa6639b7e88780cc317bccb8ac925b1e1edb0fb2f3b180db5385716c","observation_id":"cba173f1-9883-4ec5-b723-bef3f93899bb","resolution":{"observed_at":"2026-08-06T19:29:52.397415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-06T19:29:52.554579Z","title":"Ignore previous prompt: Attack techniques for language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.554579Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:67f3fe2a4cae4c88c35a95590c4a1d27b6f590a268b67b7e6264475bade2a70f","observation_id":"79d601b8-8a3f-4fd5-b438-cd9aa93d5d4f","resolution":{"observed_at":"2026-08-06T19:29:52.554579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T19:29:52.672797Z","title":"Prompt injection attack against llm-integrated applications,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.672797Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:a6babd98818b51b4eca455da278540d05f30a7e7855f310ddab9fa6cc4f64a29","observation_id":"b6db69d7-b6fc-489e-a989-964a2dc1024c","resolution":{"observed_at":"2026-08-06T19:29:52.672797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.11903","last_updated":"2023-01-10T23:07:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-01-28T02:33:07Z","title":"Chain-of-Thought Prompting Elicits Reasoning in Large Language Models","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.11903","snapshot_observed_at":"2026-08-06T19:29:52.818079Z","title":"Chain-of-thought prompting elicits reasoning in large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.818079Z"},"links":{"cited_paper":"/paper/2201.11903","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:b01d1e43704a9756645164265bc4d3ed13fc8a932816d7ed84601e68f5a5bac7","observation_id":"5638b48c-59fa-44dc-b712-2d22af042eaf","resolution":{"observed_at":"2026-08-06T19:29:52.818079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T19:29:52.931899Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:52.931899Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:b6df3903df2e54c293185fc88e6762fe736b3af8ee97f3f5eb591c8edb95530d","observation_id":"a89e7da2-0fcd-4f3b-9963-83564f8a3383","resolution":{"observed_at":"2026-08-06T19:29:52.931899Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13919","last_updated":"2024-06-06T18:37:34Z","snapshot_observed_at":"2026-08-09T21:47:22.232349Z","submitted_at":"2024-01-25T03:33:18Z","title":"WebVoyager: Building an End-to-End Web Agent with Large Multimodal Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13919","snapshot_observed_at":"2026-08-06T19:29:53.054555Z","title":"Webvoyager: Building an end-to-end web agent with large multimodal models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.054555Z"},"links":{"cited_paper":"/paper/2401.13919","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:a8d8b32674bf262b8028c269baeb427703f4cec0b2524529293a4c843b068cc7","observation_id":"8e51e3a2-faff-41f9-8f52-95feb05b7748","resolution":{"observed_at":"2026-08-06T19:29:53.054555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.09346","last_updated":"2024-05-22T17:17:03Z","snapshot_observed_at":"2026-08-08T01:06:12.789156Z","submitted_at":"2024-02-14T17:49:31Z","title":"LLMAuditor: A Framework for Auditing Large Language Models Using Human-in-the-Loop","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.09346","snapshot_observed_at":"2026-08-06T19:29:53.202993Z","title":"Llmauditor: A framework for auditing large language models using human-in-the-loop,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.202993Z"},"links":{"cited_paper":"/paper/2402.09346","citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:7811a62ca30c9b4e0e595fdae97b4fcd765973a9db31986d8f5df169aa37e703","observation_id":"3e3c3894-2598-4393-8ac4-428333da0efa","resolution":{"observed_at":"2026-08-06T19:29:53.202993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.950181Z","title":"Preventing ai hallucinations with human-in-the-loop test- ing,","venue":null,"work_id":"736cb06c-d006-4770-85fc-20ff82aed493","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.310524Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:d94c557ee5693e9496fbef2008baca8161ea6a39ccc82fc1cea7a1919e2acbaf","observation_id":"f77d285a-97a6-4c6e-b9e7-743a42db37f3","resolution":{"observed_at":"2026-08-06T19:29:56.084386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.656664Z","title":"Reducing hallucinations in large language models with custom intervention using amazon bedrock agents,","venue":null,"work_id":"645f5464-0d9c-40da-b8c1-b67f1d7d7500","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.418006Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:f6c91df188f443e861153bedc7a516b178ca62bacc5fd9068a5a054c3c71ca61","observation_id":"5855dcb5-14eb-414a-8cb3-09c250c74116","resolution":{"observed_at":"2026-08-06T19:29:55.816777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.359162Z","title":"Prompt injection attacks in multimodal and tool-augmented language models,","venue":null,"work_id":"8ee9a4d7-ffec-4504-8b81-f0a03419854b","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.579676Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:69ca3cfaf87947431879b69183ef4eef1d64593037b57a5a027d1eef8e10c43f","observation_id":"c7df287c-8d36-434a-9a8a-ba965ec6cfb5","resolution":{"observed_at":"2026-08-06T19:29:55.488803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:55.075529Z","title":"”human in the loop","venue":null,"work_id":"50198776-72e4-4d7e-a2fb-3e6ac68a6ff6","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.742996Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:cc1b4926b08e9a96199bdb3080873a4ef77b969c1d4afa86ed58b250f02147ac","observation_id":"a1502e58-5060-4b25-976a-98be8d422714","resolution":{"observed_at":"2026-08-06T19:29:55.202558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:54.795247Z","title":"From object transition to rce in the chrome renderer,","venue":null,"work_id":"933f3c10-410c-448d-88b3-acec04b70e7f","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:53.901317Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:5bbe77474e14a81626b3d85a095cfeb540b71b367a0764014b5e81154c010c06","observation_id":"339e9d24-e2e9-4b75-81ec-740c43044e29","resolution":{"observed_at":"2026-08-06T19:29:54.916401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:29:54.536667Z","title":"Announcing the responses api and computer using agent in azure ai foundry,","venue":null,"work_id":"5323fd57-de98-4fcc-84b0-9eb1ec22a741","year":2024},"citing_paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T19:29:54.026039Z"},"links":{"citing_paper":"/paper/2507.05445"},"observation_digest":"sha256:38e5d256cc9442b988731e7067d026d9b06a7eac57ec4c98de0f7e0a0d9eb79a","observation_id":"92b5b938-5ae6-4d55-9d23-57d54fcf9108","resolution":{"observed_at":"2026-08-06T19:29:54.660640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.05445","last_updated":"2025-07-07T19:50:21Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T16:15:22.418327Z","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents"},"reference_resolution":{"displayed":21,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":9,"verified_exact":0,"verified_fuzzy":11},"total_outbound_references":21},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 21 of 21 outbound references and 4 inbound Pith citation observations for arXiv:2507.05445."}