{"as_of":"2026-08-21T17:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d4bbfb3ca51e38ca7bd7f7e8f65858d1fcf26c9cce098cf9f9be14703b8dd80a","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:12:52.032965Z","state":"measured"},{"denominator":69,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":69,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:46:06.063847Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T18:15:00.821465Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2510.13727","last_updated":"2026-05-19T04:39:26Z","snapshot_observed_at":"2026-08-14T16:36:16.543226Z","submitted_at":"2025-10-15T16:30:57Z","title":"From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-21T20:42:40.823721Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2510.13727"},"observation_digest":"sha256:189f9e35eb40cb0b0dfa5fe051064b8747068a2428e58d527820c3c2bc193566","observation_id":"daae51b8-515a-4eef-84a3-91e3d663eaf9","resolution":{"observed_at":"2026-05-21T20:44:21.961440Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-08-15T15:46:06.063847Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2510.24411","last_updated":"2026-07-26T01:16:06Z","snapshot_observed_at":"2026-08-15T15:39:09.441338Z","submitted_at":"2025-10-28T13:22:39Z","title":"OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows","version":3},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-08-15T15:46:06.063847Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2510.24411"},"observation_digest":"sha256:2de2057e303d44e5c22e4fc124308fdc4039c8da6ef6fb755aa2dd3af160b6f1","observation_id":"8c1da3ea-63e5-44da-a8f7-4cae8809d4ec","resolution":{"observed_at":"2026-08-15T15:46:06.063847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2604.05229","last_updated":"2026-04-06T22:49:28Z","snapshot_observed_at":"2026-08-12T17:47:23.301971Z","submitted_at":"2026-04-06T22:49:28Z","title":"From Governance Norms to Enforceable Controls: A Layered Translation Method for Runtime Guardrails in Agentic AI","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T18:47:09.928166Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2604.05229"},"observation_digest":"sha256:041f74651911c9f45e7fdfd8e42b31303f430dd3c98dfdcc514502f4b3f66fed","observation_id":"588c5e88-bda0-401d-ab71-d3f2b019f187","resolution":{"observed_at":"2026-05-10T23:55:51.776496Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2604.19818","last_updated":"2026-04-18T20:28:26Z","snapshot_observed_at":"2026-08-16T05:11:27.917300Z","submitted_at":"2026-04-18T20:28:26Z","title":"Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T06:03:19.805349Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2604.19818"},"observation_digest":"sha256:1f206caaf082f652b2b735bea2119b1ae6d7f292a626e905b108afb3e63fbf0c","observation_id":"942fdad7-9d8a-466e-80a4-8992e0276220","resolution":{"observed_at":"2026-05-10T06:06:18.907983Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2604.25562","last_updated":"2026-04-28T12:32:21Z","snapshot_observed_at":"2026-08-15T09:47:53.698872Z","submitted_at":"2026-04-28T12:32:21Z","title":"SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-07T15:48:28.869796Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2604.25562"},"observation_digest":"sha256:02cadd6a0c58a2e00ae70be56c7799231e9d8915a7de98fe5b77ba050e0aa9e5","observation_id":"11395251-2489-44e8-8fe2-6930d95ac106","resolution":{"observed_at":"2026-05-12T00:06:17.759432Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2605.23989","last_updated":"2026-05-17T10:26:37Z","snapshot_observed_at":"2026-07-06T23:34:08.786038Z","submitted_at":"2026-05-17T10:26:37Z","title":"Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-30T19:18:40.244556Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2605.23989"},"observation_digest":"sha256:7bbc6058c69745befb3622d42663d03a5ea251d4d01602ad720f9545419b27fa","observation_id":"79087acc-2e94-4bfc-b6cd-abe4d88b6d19","resolution":{"observed_at":"2026-06-30T19:45:01.625265Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2606.14517","last_updated":"2026-06-16T09:28:39Z","snapshot_observed_at":"2026-07-06T23:52:28.557859Z","submitted_at":"2026-06-12T14:49:00Z","title":"From Shield to Target: Denial-of-Service Attacks on LLM-Based Agent Guardrails","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-27T04:42:05.886984Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2606.14517"},"observation_digest":"sha256:3a6acf48b0761a8156251882b11cf942d708cfedd41741559ecaa34e688db83d","observation_id":"9930e089-a556-466e-ba8d-7aa32fd51964","resolution":{"observed_at":"2026-07-03T16:58:43.533023Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":"2507.14293","doi":"10.48550/arxiv.2507.14293","metadata_source":"pith","pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-07-10T18:15:00.821465Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":"cs.AI","work_id":"0fe67f59-aa4e-4588-844e-53c56b0bee61","year":2025},"citing_paper":{"arxiv_id":"2607.08147","last_updated":"2026-07-09T06:37:52Z","snapshot_observed_at":"2026-08-07T03:47:57.753615Z","submitted_at":"2026-07-09T06:37:52Z","title":"Prismata: Confining Cross-Site Prompt Injection in Web Agents","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-07-10T12:20:03.672480Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2607.08147"},"observation_digest":"sha256:1bc31785af3e9d04b5c6779ab10b8c292e85fa0af1c68b0491ab541d50f09286","observation_id":"e33b4044-cd5d-4fb9-a931-f3dfbcbf16fe","resolution":{"observed_at":"2026-07-10T12:27:04.085771Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.14293","snapshot_observed_at":"2026-08-01T23:03:15.423940Z","title":"Webguard: Building a generalizable guardrail for web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15550","last_updated":"2026-07-17T01:45:54Z","snapshot_observed_at":"2026-08-16T23:32:16.917248Z","submitted_at":"2026-07-17T01:45:54Z","title":"SeerGuard: A Safety Framework for Mobile GUI Agents via World Model Prediction","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-01T23:03:15.423940Z"},"links":{"cited_paper":"/paper/2507.14293","citing_paper":"/paper/2607.15550"},"observation_digest":"sha256:276c60092a23d63438929f1e605a6d9bc51fcf90a36f6faac2e7386e6bb8aac1","observation_id":"c4195ba8-2e4e-4806-931d-5db729aca21e","resolution":{"observed_at":"2026-08-01T23:03:15.423940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.14293/citation-record","integrity":"/paper/2507.14293/integrity","json":"/paper/2507.14293/citation-record.json","paper":"/paper/2507.14293"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.237094Z","title":"Agent S: an open agentic framework that uses computers like a human","venue":null,"work_id":"9cfa233f-892c-4b51-913e-9b0011a489b2","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.109846Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:8659ec2117ce0f56765756a1261e35aa0039c2a3f61d0de3fec4c70132734518","observation_id":"c2e7c5bd-4227-492e-a0ac-3f2b6e3c5b18","resolution":{"observed_at":"2026-08-06T16:12:57.242460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:47.194194Z","title":"Digirl: Training in-the-wild device-control agents with autonomous reinforcement learning, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.194194Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:e9c5c2407d2d8fb0673b0849a8f92bfd6d48709c940c496dfa24a57fc2dbca5a","observation_id":"5d8808d4-7d10-4fd7-9f1c-22c94096ca56","resolution":{"observed_at":"2026-08-06T16:12:47.194194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-08-21T16:02:41.546193Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-06T16:12:47.275932Z","title":"Qwen2.5-vl technical report","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.275932Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:fc83ea0fef1b9186ed1288db94b0f7ed9de3980948340874ffbde242c9527b43","observation_id":"4a189b8f-4e06-43a1-b6c2-40b8e6d5aa20","resolution":{"observed_at":"2026-08-06T16:12:47.275932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:47.374120Z","title":"Doomarena: A framework for testing ai agents against evolving security threats","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.374120Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:35264d9ef506e01a9a05ccfd5b411cd6880e0d3bc7e453da9efbb5f799c0cb0f","observation_id":"43b8b139-df9a-4f4e-b7ad-9bee3f44e930","resolution":{"observed_at":"2026-08-06T16:12:47.374120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-21T16:29:42.542209Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-06T16:12:47.459876Z","title":"The obvious invisible threat: Llm-powered gui agents’ vulnerability to fine-print injections","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.459876Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:191883383ff1d04f406bd619f2e1a871c465c29445e428ccf675d4fc1cfe7fef","observation_id":"1095f92a-4d4e-47c4-a14f-766e8757ff8c","resolution":{"observed_at":"2026-08-06T16:12:47.459876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.09809","last_updated":"2025-02-13T23:00:33Z","snapshot_observed_at":"2026-08-07T20:22:59.633932Z","submitted_at":"2025-02-13T23:00:33Z","title":"AgentGuard: Repurposing Agentic Orchestrator for Safety Evaluation of Tool Orchestration","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.09809","snapshot_observed_at":"2026-08-06T16:12:47.563041Z","title":"Agentguard: Repurposing agentic orchestrator for safety evaluation of tool orchestration","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.563041Z"},"links":{"cited_paper":"/paper/2502.09809","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:dd5f187c86eb6c8b9f9ccfd5ad2028c54e00aead008b4a20ac7627334688c47c","observation_id":"a8d481dd-6c7e-4b82-9855-b9dc97a5beb5","resolution":{"observed_at":"2026-08-06T16:12:47.563041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.05410","last_updated":"2025-05-08T16:51:43Z","snapshot_observed_at":"2026-08-15T05:29:13.739206Z","submitted_at":"2025-05-08T16:51:43Z","title":"Reasoning Models Don't Always Say What They Think","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.05410","snapshot_observed_at":"2026-08-06T16:12:47.648456Z","title":"Reasoning models don’t always say what they think","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.648456Z"},"links":{"cited_paper":"/paper/2505.05410","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:313d68570cae32749f803b37f1f9d8cdc3528f179799c7d536aed8c53229fb96","observation_id":"caa0589b-8752-4308-b471-8fef84c0721a","resolution":{"observed_at":"2026-08-06T16:12:47.648456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.193647Z","title":"Shieldagent: Shielding LLM agents via verifiable safety policy reasoning","venue":null,"work_id":"382117c0-aea6-4cba-b935-d39ea4589a86","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.698278Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:b916e835ffc7f521be8d0ff5ce614248538c01a18888a45a81dbc1680145c07d","observation_id":"ce47d939-6281-4a7b-bc73-a5e2336e5405","resolution":{"observed_at":"2026-08-06T16:12:57.203321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.173819Z","title":"SeeClick: Harnessing GUI grounding for advanced visual GUI agents","venue":null,"work_id":"2ec96358-5405-4319-8f1c-88943f33f642","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.757629Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:52476f9b74d84fd257c8c935758a8005d7396ca4668c219ffc7984f321ce20ab","observation_id":"c0349a46-98c2-4cd1-9121-69be27e9ecde","resolution":{"observed_at":"2026-08-06T16:12:57.180123Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05467","last_updated":"2025-02-28T16:02:27Z","snapshot_observed_at":"2026-08-19T21:46:54.851846Z","submitted_at":"2024-12-06T23:43:59Z","title":"The BrowserGym Ecosystem for Web Agent Research","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05467","snapshot_observed_at":"2026-08-06T16:12:47.846998Z","title":"Xu, Siva Reddy, Quentin Cappart, Graham Neubig, Ruslan Salakhutdinov, Nicolas Chapados, and Alexandre Lacoste","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.846998Z"},"links":{"cited_paper":"/paper/2412.05467","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:cb56107a6423c6f14fccff2c753a087aaacf5187e0c194dd2fd6194cc6e67f92","observation_id":"ca3e99d4-9116-4cc3-a3cc-fd74372bafaf","resolution":{"observed_at":"2026-08-06T16:12:47.846998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.10414","last_updated":"2024-11-15T18:34:07Z","snapshot_observed_at":"2026-08-17T21:40:47.016297Z","submitted_at":"2024-11-15T18:34:07Z","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.10414","snapshot_observed_at":"2026-08-06T16:12:47.921568Z","title":"Llama guard 3 vision: Safeguarding human-ai image understanding conversations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.921568Z"},"links":{"cited_paper":"/paper/2411.10414","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:f7b1f75dbfaf6a1c977e9fe96b78e395d74b42f998727e2114042ba0e3ffdc21","observation_id":"e8ec850e-642c-49aa-9266-b79e0230029d","resolution":{"observed_at":"2026-08-06T16:12:47.921568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.149553Z","title":"Mind2web: Towards a generalist agent for the web","venue":null,"work_id":"47c1091b-d0d8-473c-870e-780830b510e8","year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:47.972534Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:3125d8f4913b72ca39d4fb47ac6e84cdc41e8f6d44615b282c6ae601292670d9","observation_id":"c4b9e735-d5a1-4e3f-90ac-9ef9f676f7fb","resolution":{"observed_at":"2026-08-06T16:12:57.156040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.129606Z","title":"Preemptive detection and correction of misaligned actions in llm agents, 2024","venue":null,"work_id":"38a996e5-4c48-46df-87d7-0c121894f536","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.042754Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:ce1fae7535a1705b021ba3450b417f4e8cd35169e4325a74cbfdecf5be39896b","observation_id":"1ed7cfe6-692a-4242-86f3-61850465974f","resolution":{"observed_at":"2026-08-06T16:12:57.135336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.17713","last_updated":"2024-11-18T21:42:17Z","snapshot_observed_at":"2026-08-21T05:52:28.700240Z","submitted_at":"2024-11-18T21:42:17Z","title":"Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.17713","snapshot_observed_at":"2026-08-06T16:12:48.091007Z","title":"Llama guard 3-1b-int4: Compact and efficient safeguard for human-ai conversations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.091007Z"},"links":{"cited_paper":"/paper/2411.17713","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:1ae5ba43d206e8153728c2f6fd430a2b6ef5ffb1671c486195662603d7d45d05","observation_id":"432a2faf-6660-47e1-bc12-ef20d58c848c","resolution":{"observed_at":"2026-08-06T16:12:48.091007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:57.106957Z","title":"Navigating the digital world as humans do: Universal visual grounding for GUI agents","venue":null,"work_id":"b67aa2ba-9643-46e7-8776-c6d3e78986b0","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.229784Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:72a56bbf44d7283883cbb1f1bea7e35b8a5d3236a668f03de464e1e6a85dc9c9","observation_id":"b7ab8103-17eb-4be4-b087-5f97783066aa","resolution":{"observed_at":"2026-08-06T16:12:57.113912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:48.306232Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.306232Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:76724efe114485ab5786a4ca7674988033b1e1ffd46540f6cd62622c8ee60b3c","observation_id":"4259e9c4-a863-49cc-8190-351f3356e6a6","resolution":{"observed_at":"2026-08-06T16:12:48.306232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.990826Z","title":"Is your llm secretly a world model of the internet? model-based planning for web agents, 2024","venue":null,"work_id":"065a969f-a4c6-4f76-a1fb-f09adbc11ba3","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.398699Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:e1ce218048b5398b5d1c1420313ca7d1ad9f352284092a4b8ba10ac7c6f39ae0","observation_id":"d55bd2a6-f801-45c4-a88c-db846a3dd196","resolution":{"observed_at":"2026-08-06T16:12:57.074699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.820111Z","title":"Cogagent: A visual language model for gui agents","venue":null,"work_id":"a4317d82-3166-4523-8a66-d63d6e56382a","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.490849Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:0c2b99b93e991d89ed538c5752c1e2d5c7b5bdaf42e5b5f06cfaa95e167a101e","observation_id":"4bb771c3-77e6-4b39-8f09-070af4eea194","resolution":{"observed_at":"2026-08-06T16:12:56.908262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-08-15T14:10:05.296241Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-06T16:12:48.546694Z","title":"Sleeper agents: Training deceptive llms that persist through safety training","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.546694Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:d428e547665e6c2493d5d4abf1717608cf8651798cb54b787c0e80bffd5ecffe","observation_id":"c5ff6590-c9ab-4da8-a2f7-01cb2a09a9b3","resolution":{"observed_at":"2026-08-06T16:12:48.546694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-08-15T14:02:47.366139Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-06T16:12:48.636906Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.636906Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:cf334541c985fc6e39ee319cf392421003aea1d442cbd2f28263ac14d149d1bb","observation_id":"2773b1bd-c4af-4f50-84bc-b984f998ef0e","resolution":{"observed_at":"2026-08-06T16:12:48.636906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-06T16:12:48.722673Z","title":"Llama guard: Llm-based input-output safeguard for human-ai conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.722673Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:60093bc9852d38458ff90b005fe1addb9b562d7475787ca728fcc22371019a7b","observation_id":"30f7ec07-3d44-4cf9-95d7-a88ae65cc2ed","resolution":{"observed_at":"2026-08-06T16:12:48.722673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.13649","last_updated":"2024-06-06T02:01:09Z","snapshot_observed_at":"2026-08-21T15:15:53.387126Z","submitted_at":"2024-01-24T18:35:21Z","title":"VisualWebArena: Evaluating Multimodal Agents on Realistic Visual Web Tasks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.13649","snapshot_observed_at":"2026-08-06T16:12:48.800326Z","title":"Visualwebarena: Evaluating multimodal agents on realistic visual web tasks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.800326Z"},"links":{"cited_paper":"/paper/2401.13649","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:ca0889892c6bc3ff3f1f169df7f1b6c3826d7d2933973e5b5b68bd9e50fbacdb","observation_id":"30e41809-1982-4906-8e8b-968b5d22145e","resolution":{"observed_at":"2026-08-06T16:12:48.800326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:48.886850Z","title":"Tree search for language model agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.886850Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:130de9b34c68c35bb7ca92b5d2d65cf2df0ab2cae0a67f17817ce5514c3f7d2c","observation_id":"475ea7df-b219-4e32-aa0b-7d30cb443103","resolution":{"observed_at":"2026-08-06T16:12:48.886850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.493946Z","title":"Hendryx, Summer Yue, and Zifan Wang","venue":null,"work_id":"2985f59b-2346-45b6-8e49-9a3b738f3c18","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:48.949194Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:e1a64efafde21f376e8ed2fc4c3edc98420ebcb22ffe4af1c1896a302693726d","observation_id":"1a667747-59a2-4b01-b7b3-918cfde2669c","resolution":{"observed_at":"2026-08-06T16:12:56.636403Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:56.137708Z","title":"Refusal-trained llms are easily jailbroken as browser agents, 2024","venue":null,"work_id":"9d70a500-f203-4853-802a-d7385c7b12c0","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.034234Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:d582f18f9dd76da1249f559475cd3411d77f59feeaf5e26632e46dfdba94ec01","observation_id":"a43d976b-691e-442a-953c-420ff553abce","resolution":{"observed_at":"2026-08-06T16:12:56.261080Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:49.133062Z","title":"Bradley Knox, and Kimin Lee","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.133062Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:f4e5d1d4a4f5d23dd0e0065195ec8c99871b82eed340d8b22ce10b6c5e210d33","observation_id":"da90a2ff-5c49-4f9e-8c7d-ba1e45c0051b","resolution":{"observed_at":"2026-08-06T16:12:49.133062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.20279","last_updated":"2025-06-08T05:39:56Z","snapshot_observed_at":"2026-08-16T12:46:44.993301Z","submitted_at":"2025-03-26T07:08:15Z","title":"sudo rm -rf agentic_security","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.20279","snapshot_observed_at":"2026-08-06T16:12:49.199465Z","title":"sudo rm-rf agentic_security","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.199465Z"},"links":{"cited_paper":"/paper/2503.20279","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:18cd9acb7e940ba0fa8cc40fabe4d91bebf245b491d44c7f3ca5bc74c17dd3f0","observation_id":"85b4494c-94af-4783-bbe6-2165075d40d3","resolution":{"observed_at":"2026-08-06T16:12:49.199465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06703","last_updated":"2026-06-04T09:59:28Z","snapshot_observed_at":"2026-08-16T13:11:11.539278Z","submitted_at":"2024-10-09T09:13:38Z","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06703","snapshot_observed_at":"2026-08-06T16:12:49.302488Z","title":"St- webagentbench: A benchmark for evaluating safety and trustworthiness in web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.302488Z"},"links":{"cited_paper":"/paper/2410.06703","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:5e98dd2c07e8097807eaad6ae364e9351ba337d929129c12f61fea24accb9277","observation_id":"d2305a9a-1075-4d55-b33d-24dd96bffe81","resolution":{"observed_at":"2026-08-06T16:12:49.302488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:49.383511Z","title":"Redteamcua: Realistic adversarial testing of computer-use agents in hybrid web-os environments","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.383511Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:6e3316c21eb930a6fcc269c3715de3b71a3dd3371521b52792a16fc6b67a626c","observation_id":"0262b0ef-e33f-42d1-ad1a-18c090be34ea","resolution":{"observed_at":"2026-08-06T16:12:49.383511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11295","last_updated":"2025-03-12T20:54:00Z","snapshot_observed_at":"2026-08-19T20:31:13.864118Z","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.11295","snapshot_observed_at":"2026-08-06T16:12:49.478511Z","title":"EIA: environmental injection attack on generalist web agents for privacy leakage","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.478511Z"},"links":{"cited_paper":"/paper/2409.11295","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:e49fb7d6a93fd73125590a78857cc9c5bb9ad380e767f07b0d3fd2ce2d5ac912","observation_id":"abae9612-218d-498a-8634-014caef4db11","resolution":{"observed_at":"2026-08-06T16:12:49.478511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.15287","last_updated":"2024-11-22T16:56:49Z","snapshot_observed_at":"2026-08-14T06:45:48.797717Z","submitted_at":"2024-11-22T16:56:49Z","title":"Sycophancy in Large Language Models: Causes and Mitigations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.15287","snapshot_observed_at":"2026-08-06T16:12:49.594341Z","title":"Sycophancy in large language models: Causes and mitigations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.594341Z"},"links":{"cited_paper":"/paper/2411.15287","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:df47fe535315ac3a3578544c5192a137006e4e2246acf094b1e7be29e61e4333","observation_id":"d5e4330f-4c62-4e20-8c42-8eee2f5eaa92","resolution":{"observed_at":"2026-08-06T16:12:49.594341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04984","last_updated":"2025-01-14T20:16:01Z","snapshot_observed_at":"2026-08-15T04:02:05.429942Z","submitted_at":"2024-12-06T12:09:50Z","title":"Frontier Models are Capable of In-context Scheming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.04984","snapshot_observed_at":"2026-08-06T16:12:49.659835Z","title":"Frontier models are capable of in-context scheming","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.659835Z"},"links":{"cited_paper":"/paper/2412.04984","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:8dfc71c8ef2aa6c39e282e3294c2ccb93d7b3f62731907d1eabc5f22c08c9166","observation_id":"02e8079a-db48-43d1-b8be-752f9b509781","resolution":{"observed_at":"2026-08-06T16:12:49.659835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02907","last_updated":"2025-02-05T18:56:51Z","snapshot_observed_at":"2026-08-17T16:47:51.121990Z","submitted_at":"2024-10-03T18:56:51Z","title":"NNetNav: Unsupervised Learning of Browser Agents Through Environment Interaction in the Wild","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02907","snapshot_observed_at":"2026-08-06T16:12:49.754196Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.754196Z"},"links":{"cited_paper":"/paper/2410.02907","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a6c0ec15f858162e51aff69e14599559b6a72872d0329e1f8f6d85ef3a401c78","observation_id":"f7ba4ca9-95b0-4ad4-bdf0-4d44b305f6bd","resolution":{"observed_at":"2026-08-06T16:12:49.754196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.896260Z","title":"Testing language model agents safely in the wild","venue":null,"work_id":"42b085b7-5850-4581-a9fa-e7a6872a7a7a","year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.874527Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:b7b1c383ff29475805d67c30ca9fac1be53fdeb27106225a752882957daaef0c","observation_id":"13f45acc-65b0-40e2-b566-b18e14637aef","resolution":{"observed_at":"2026-08-06T16:12:56.007571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.569620Z","title":"Operator system card., 2025","venue":null,"work_id":"3009d5bc-5102-4f22-8279-1c5c2c00ef61","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:49.949585Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:c07dca1c05a12f0631981db7146b800590a7502925aaee6ec85bcfbafd3e1a3d","observation_id":"4e67643d-8a91-4a05-8320-f454f3343446","resolution":{"observed_at":"2026-08-06T16:12:55.758295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11357","last_updated":"2025-05-30T02:30:57Z","snapshot_observed_at":"2026-08-20T13:37:48.320993Z","submitted_at":"2025-02-17T02:13:48Z","title":"Explorer: Scaling Exploration-driven Web Trajectory Synthesis for Multimodal Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11357","snapshot_observed_at":"2026-08-06T16:12:50.052388Z","title":"Explorer: Scaling exploration-driven web trajectory synthesis for multimodal web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.052388Z"},"links":{"cited_paper":"/paper/2502.11357","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:b2e2f189165b74024e361befcbf7fb0197e25847acb5e6a4e4aa4bfe1f32d63a","observation_id":"4a81bf5e-1a03-41a2-bfc7-a20bbd1e56bc","resolution":{"observed_at":"2026-08-06T16:12:50.052388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.07199","last_updated":"2024-08-13T20:52:13Z","snapshot_observed_at":"2026-08-14T15:46:52.927758Z","submitted_at":"2024-08-13T20:52:13Z","title":"Agent Q: Advanced Reasoning and Learning for Autonomous AI Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.07199","snapshot_observed_at":"2026-08-06T16:12:50.130722Z","title":"Agent Q: advanced reasoning and learning for autonomous AI agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.130722Z"},"links":{"cited_paper":"/paper/2408.07199","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:0368530d879d1b3f8c6964a1595d8f1236f53405ee4a2ff67dae51ee041e473c","observation_id":"e6905d58-8fda-4dc7-95a2-00730b0da54a","resolution":{"observed_at":"2026-08-06T16:12:50.130722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.335916Z","title":"Webrl: Training LLM web agents via self- evolving online curriculum reinforcement learning","venue":null,"work_id":"728d8ba5-5d64-4a5e-874c-f6058bbeac19","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.189066Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:85e83fbd6b4f188ed94ddb476bffc238ecd23035c312d2129f0e853f1287d28e","observation_id":"354f27ed-7fc2-4b1c-94b4-385219666d31","resolution":{"observed_at":"2026-08-06T16:12:55.424353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12326","last_updated":"2025-01-21T17:48:10Z","snapshot_observed_at":"2026-08-16T21:34:35.147772Z","submitted_at":"2025-01-21T17:48:10Z","title":"UI-TARS: Pioneering Automated GUI Interaction with Native Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12326","snapshot_observed_at":"2026-08-06T16:12:50.263359Z","title":"UI-TARS: pioneering automated GUI interaction with native agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.263359Z"},"links":{"cited_paper":"/paper/2501.12326","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:ddf7a4d7dfc906d30059a41e2a9be8e226ca4401c6de15c256715e159b0d505b","observation_id":"52101733-bf6f-4e3e-802d-50e7f88ab6b9","resolution":{"observed_at":"2026-08-06T16:12:50.263359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.13548","last_updated":"2025-05-10T07:10:46Z","snapshot_observed_at":"2026-08-14T16:46:25.561386Z","submitted_at":"2023-10-20T14:46:48Z","title":"Towards Understanding Sycophancy in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.13548","snapshot_observed_at":"2026-08-06T16:12:50.339267Z","title":"Towards understanding sycophancy in language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.339267Z"},"links":{"cited_paper":"/paper/2310.13548","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:30d75aee5705be2511bd5aac7c65f10a640232424a8d75e51ec52334e6d6188d","observation_id":"8649ffeb-edf7-41dd-bf06-e35c8d85d5df","resolution":{"observed_at":"2026-08-06T16:12:50.339267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.10893","last_updated":"2025-01-18T22:34:41Z","snapshot_observed_at":"2026-08-17T14:56:34.874115Z","submitted_at":"2025-01-18T22:34:41Z","title":"Learn-by-interact: A Data-Centric Framework for Self-Adaptive Agents in Realistic Environments","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.10893","snapshot_observed_at":"2026-08-06T16:12:50.409392Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.409392Z"},"links":{"cited_paper":"/paper/2501.10893","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:cf0c104a18685fb6461ff61e9f019c8aab92c77e0ec5439ab76bff4e75258577","observation_id":"98bfbb10-97bd-4952-954a-b2f5a33dd205","resolution":{"observed_at":"2026-08-06T16:12:50.409392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:50.486326Z","title":"Qwen2.5: A party of foundation models, September 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.486326Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:2b49064e6e8b961f6edffc72d2b15b35901930ffd066bcbc68dac286eb3e8038","observation_id":"83040be3-a4a0-49a5-9392-b7921466beb6","resolution":{"observed_at":"2026-08-06T16:12:50.486326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.04957","last_updated":"2025-03-06T20:43:14Z","snapshot_observed_at":"2026-08-21T06:09:22.991230Z","submitted_at":"2025-03-06T20:43:14Z","title":"SafeArena: Evaluating the Safety of Autonomous Web Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.04957","snapshot_observed_at":"2026-08-06T16:12:50.559312Z","title":"Safearena: Evaluating the safety of autonomous web agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.559312Z"},"links":{"cited_paper":"/paper/2503.04957","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:4c0b82021ef857058a3ec43b0d9691574cf6d2799811687be63903c05836d707","observation_id":"31e8bf2d-f917-47fb-a33f-041eded685a2","resolution":{"observed_at":"2026-08-06T16:12:50.559312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:55.059058Z","title":"Can ai change your view? evidence from a large-scale online field experiment, April 2025","venue":null,"work_id":"d5ab1321-a1c9-461e-aa7f-e6a61c3a7d9a","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.630985Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:81b50db21c319dbe61056092df0bfd1071d2effac7ce7be4dc9f1bd5688edfa5","observation_id":"140ba2fb-313b-4d14-b637-eb18d8e94be6","resolution":{"observed_at":"2026-08-06T16:12:55.187072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.10001","last_updated":"2023-06-01T05:38:00Z","snapshot_observed_at":"2026-08-19T04:46:33.266437Z","submitted_at":"2022-12-20T05:20:54Z","title":"Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.10001","snapshot_observed_at":"2026-08-06T16:12:50.719954Z","title":"Towards understanding chain-of-thought prompting: An empirical study of what matters","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.719954Z"},"links":{"cited_paper":"/paper/2212.10001","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:d897a49b92ed2591c4f45c78587c5da988d299819abb0105e029ecaa0f11b82a","observation_id":"3bbc517c-394d-4f27-b53a-39185559dc19","resolution":{"observed_at":"2026-08-06T16:12:50.719954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:54.781651Z","title":"Dissecting adversarial robustness of multimodal LM agents","venue":null,"work_id":"81530a13-bf12-43df-99f5-589e16c8bcb6","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.834857Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:5a88e4feea44c66bea85c3ef490f90466767e42609ecd1797eb8c5d99d766dcf","observation_id":"bd4d4d49-5c32-40a6-a7fc-f92f9c5c6f87","resolution":{"observed_at":"2026-08-06T16:12:54.903323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-06T16:12:50.914742Z","title":"Guardagent: Safeguard LLM agents by a guard agent via knowledge-enabled reasoning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:50.914742Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:e49cf8fe86d0e3316b216bfd21f823b1e4f6baf04609c315b0dabc0b2e7287ac","observation_id":"d402eb36-565c-4176-a53a-60161258d2dc","resolution":{"observed_at":"2026-08-06T16:12:50.914742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10634","last_updated":"2023-10-16T17:54:53Z","snapshot_observed_at":"2026-08-20T22:10:55.750269Z","submitted_at":"2023-10-16T17:54:53Z","title":"OpenAgents: An Open Platform for Language Agents in the Wild","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10634","snapshot_observed_at":"2026-08-06T16:12:51.044093Z","title":"Liu, Yiheng Xu, Hongjin Su, Dongchan Shin, Caiming Xiong, and Tao Yu","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.044093Z"},"links":{"cited_paper":"/paper/2310.10634","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:a3b890d81cfd71b860929322ddb6c6e7a117534350f25937df8f558728ed1789","observation_id":"4e881b8c-86f4-46dd-a444-8be366c975d8","resolution":{"observed_at":"2026-08-06T16:12:51.044093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17401","last_updated":"2025-05-31T18:34:01Z","snapshot_observed_at":"2026-08-20T00:46:45.942018Z","submitted_at":"2024-10-22T20:18:26Z","title":"AdvAgent: Controllable Blackbox Red-teaming on Web Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.17401","snapshot_observed_at":"2026-08-06T16:12:51.111978Z","title":"Advweb: Controllable black-box attacks on vlm-powered web agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.111978Z"},"links":{"cited_paper":"/paper/2410.17401","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:87ff0c390e3528e79e318e7437d7d4ab570d8fe05941135cf4016934414ab18d","observation_id":"10569b72-f8b6-470e-b0a8-8290ce82ad5a","resolution":{"observed_at":"2026-08-06T16:12:51.111978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.11441","last_updated":"2023-11-06T07:39:49Z","snapshot_observed_at":"2026-08-12T21:25:32.312122Z","submitted_at":"2023-10-17T17:51:31Z","title":"Set-of-Mark Prompting Unleashes Extraordinary Visual Grounding in GPT-4V","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.11441","snapshot_observed_at":"2026-08-06T16:12:51.205216Z","title":"Set-of-mark prompting unleashes extraordinary visual grounding in gpt-4v","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.205216Z"},"links":{"cited_paper":"/paper/2310.11441","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:3fe4e3218b4c99003f378f9617ca8ffd0eaeaf95df5a7e7cf70fbf9e9d42fa2d","observation_id":"9b5202bd-1c0d-4e8d-aa5f-4415d66decd6","resolution":{"observed_at":"2026-08-06T16:12:51.205216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-20T04:34:32.315379Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-06T16:12:51.333428Z","title":"Benchmarking and defending against indirect prompt injection attacks on large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.333428Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:13b00380dddf4861b11844705e929e006285833d33459e44d70d89ae424a2caf","observation_id":"176dae2d-28d1-42fe-8986-b5645525b5c9","resolution":{"observed_at":"2026-08-06T16:12:51.333428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02052","last_updated":"2025-02-27T20:13:19Z","snapshot_observed_at":"2026-08-20T01:56:09.229402Z","submitted_at":"2024-10-02T21:42:35Z","title":"ExACT: Teaching AI Agents to Explore with Reflective-MCTS and Exploratory Learning","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02052","snapshot_observed_at":"2026-08-06T16:12:51.405901Z","title":"Exact: Teaching AI agents to explore with reflective-mcts and exploratory learning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.405901Z"},"links":{"cited_paper":"/paper/2410.02052","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:58ae72f59877b1bb931c927fa10cda1f94b1dfe37ad87cdfa02639e701a66954","observation_id":"434daac8-3b2d-44cc-90b4-ef956887eeee","resolution":{"observed_at":"2026-08-06T16:12:51.405901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:54.486802Z","title":null,"venue":null,"work_id":"c2f5c7e6-bf27-42c4-b3ec-29329218dd3d","year":null},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.484039Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:10682bfbe5bf21c3f1815e46e2a7cbee0b883af3f60ace97d6a5872ea917d4dd","observation_id":"5b643872-b3af-4805-a6a5-34bc3d19b471","resolution":{"observed_at":"2026-08-06T16:12:54.606093Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.02391","last_updated":"2025-05-24T16:15:46Z","snapshot_observed_at":"2026-08-16T13:03:02.879460Z","submitted_at":"2024-11-04T18:56:42Z","title":"Attacking Vision-Language Computer Agents via Pop-ups","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.02391","snapshot_observed_at":"2026-08-06T16:12:51.576325Z","title":"Attacking vision-language computer agents via pop-ups","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.576325Z"},"links":{"cited_paper":"/paper/2411.02391","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:66a5ae7588995104ac24c25f8dd0026d7ebddd21f971feaaacb16b4bbcffa714","observation_id":"deb16fda-5796-4beb-8290-da7d3a6c2079","resolution":{"observed_at":"2026-08-06T16:12:51.576325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:54.273884Z","title":"From interaction to impact: Towards safer ai agent through understanding and evaluating mobile ui operation impacts","venue":null,"work_id":"600045fc-876f-4255-9e06-cb564f0bbee5","year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.630479Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:fc6f222620b8dbe3a69688d9b29437458ee5e095d033fe01b6c579e658fa08c0","observation_id":"f21657b1-bafc-4164-b794-b0f4e1f0ce8a","resolution":{"observed_at":"2026-08-06T16:12:54.374363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.07079","last_updated":"2025-04-09T17:51:50Z","snapshot_observed_at":"2026-07-06T21:06:50.056353Z","submitted_at":"2025-04-09T17:51:50Z","title":"SkillWeaver: Web Agents can Self-Improve by Discovering and Honing Skills","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.07079","snapshot_observed_at":"2026-08-06T16:12:51.724294Z","title":"Skillweaver: Web agents can self-improve by discovering and honing skills","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.724294Z"},"links":{"cited_paper":"/paper/2504.07079","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:7003e55a08649eec5a1cca2bd349a74911830aebe9bb45c1e1a375895d22484f","observation_id":"c621420a-238f-4d62-8ea5-f2d00ec68cb7","resolution":{"observed_at":"2026-08-06T16:12:51.724294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:53.991531Z","title":"Gpt-4v(ision) is a generalist web agent, if grounded","venue":null,"work_id":"ff212c7f-5528-4089-8189-1373daa630d3","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.789900Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:7fb88dd1c9b2f9bc1d3c2e1b0448ca07017d32e0a4e25485b3a921c657d74a61","observation_id":"4c7b9d0e-0d4d-4e08-912b-f47abac6ddf1","resolution":{"observed_at":"2026-08-06T16:12:54.105118Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:53.741492Z","title":"WebOlympus: An open platform for web agents on live websites","venue":null,"work_id":"cd1d023a-ca5f-4e1a-b050-6a775922d7a1","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.906860Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:fd09b58ecf3264f137fc8bbbcf46df2c4719d0c7791b3dbce1cca8e63649e7a8","observation_id":"96baaf2f-49f6-48ad-a77d-c87f762a7f43","resolution":{"observed_at":"2026-08-06T16:12:53.866343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:12:53.550024Z","title":"Xu, Hao Zhu, Xuhui Zhou, Robert Lo, Abishek Sridhar, Xianyi Cheng, Tianyue Ou, Yonatan Bisk, Daniel Fried, Uri Alon, and Graham Neubig","venue":null,"work_id":"e9eba894-fe5b-4a87-b0b9-6c45408530ba","year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:51.966506Z"},"links":{"citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:52c78187e700bd857764989fe9df92397c34486c347f9565886541b9744070b9","observation_id":"30a73cca-c0d5-44c2-91a1-beb71ec94a5f","resolution":{"observed_at":"2026-08-06T16:12:53.623624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.13194","last_updated":"2024-12-17T18:59:50Z","snapshot_observed_at":"2026-08-20T06:00:37.806029Z","submitted_at":"2024-12-17T18:59:50Z","title":"Proposer-Agent-Evaluator(PAE): Autonomous Skill Discovery For Foundation Model Internet Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.13194","snapshot_observed_at":"2026-08-06T16:12:52.032965Z","title":"Checkout","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T16:12:52.032965Z"},"links":{"cited_paper":"/paper/2412.13194","citing_paper":"/paper/2507.14293"},"observation_digest":"sha256:f71d08577946e0977c035f5aa3e55f9edebff64e5dbcd425ebbc77a57a57693d","observation_id":"37e47a7e-91a5-43e4-9629-014fd5abfb46","resolution":{"observed_at":"2026-08-06T16:12:52.032965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2507.14293","last_updated":"2025-07-18T18:06:27Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-20T02:31:40.859214Z","submitted_at":"2025-07-18T18:06:27Z","title":"WebGuard: Building a Generalizable Guardrail for Web Agents"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":0,"verified_fuzzy":19},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 9 inbound Pith citation observations for arXiv:2507.14293."}