Pith. sign in

Paper Citation Record · LEDGER

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

As of 20 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 3 inbound Pith citation observations for arXiv:2508.03125.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2508.03125 v1

Coverage vector

measured 18 of 18 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T04:46:11.845318Z

measured 21 of 21 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T22:07:42.304265Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-07-10T20:57:34.795349Z

Reference resolution

18 of 18 outbound references displayed

  • verified exact0
  • verified fuzzy5
  • unresolved13
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation c0f86c1d-014a-4142-bffe-ed05bf0efcf8 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 1

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:14.452881Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.669642Z digest=sha256:ff545e76071bc9fe84e3b98b5ffff41c20d480ae358b56854264dac567259d52

Observation fe076a48-d3bd-410e-9027-70371b3697be · outbound

This paper cites Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agents.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agents

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T04:46:10.472401Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T04:46:10.472401Z digest=sha256:fe01167c0b38ae36ca627df581cbfc75ff081493403858d72e26596bf5341210

Observation 1a094781-add8-4a0b-a6e4-8dc7afdff49a · outbound

This paper cites CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-06T04:46:10.566080Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T04:46:10.566080Z digest=sha256:b5262c1ff901ef1e1a1103af7a934c1d4aa50b1efd2bc3c70b0326cc41de8342

Observation 677407c8-c0e7-4811-8d4d-fb769219dee7 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 4

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:13.323288Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.990354Z digest=sha256:f61c625e167a860a3de9f94eae5a40d2721a59655be4cb6a8e280034fe5768ba

Observation 74df91b9-18b1-42a9-b6c3-a53e76462dd9 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 5

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:14.263127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.730600Z digest=sha256:382bfeeaea605e9f828874757e694d095673371d03086edefa266932b64d78c9

Observation 51563ef3-f45c-4dd7-8822-b63a46618124 · outbound

This paper cites Consider:.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Consider:

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T04:46:14.100238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.799714Z digest=sha256:5cc49d17c507f5c722981775780d4a7e8791c9f788da7b6f0aeda4bb86e343a4

Observation e6e6c720-e9bb-41b6-9983-35e5e43fc005 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 7

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:13.934181Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.859601Z digest=sha256:a1ba7528ee0ac598cb6135df363354b4d0c5e0975b3e01c98136f5c4acd319a3

Observation d0bb996a-8dfb-4cff-9f5d-048756aabe45 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 8

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:13.755727Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.900457Z digest=sha256:5cbcf1fac2e754c9463bedcdcd8ffed4f928af04041e5f2fd2e89f6bf2147677

Observation dd7d138f-30ff-4021-9492-38678be69478 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 9

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:13.539913Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:10.961554Z digest=sha256:3bdf662965e01d034b4b9ee7334dc1434bc46af7607507afdd3aca3a196464f3

Observation dcfa664c-9165-4f07-8b32-75db81201654 · outbound

This paper cites Your response should include:.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Your response should include:

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T04:46:13.195379Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.093082Z digest=sha256:5e976219f07bfd501f776bf547948a94864c17544ac114000564c2bf47b02fdf

Observation 7b2ea7bf-7beb-4424-86ff-165ddb625aed · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 12

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:13.100042Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.203848Z digest=sha256:48856c44e099d4349ae31cbfae7d45281de1df953ec3f78f50541e786b2a5293

Observation 2495a3da-cca8-4693-945f-9f588b9edfe3 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 13

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:12.879735Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.324232Z digest=sha256:74441c18841185fbdb4aacecd57512947f82a82bebec87ac2d793c7ecc643bbd

Observation f63d8ec0-542e-4174-bb4d-1dd0e82e51d8 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 14

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:12.697510Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.373601Z digest=sha256:db845cbdb9b5219ddbc8295def27d227e33c765b5c73fed49df8c65c99582340

Observation cb846caa-b24c-4874-83e1-fc79d10ed438 · outbound

This paper cites bypass security checks.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS bypass security checks

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T04:46:12.586451Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.505104Z digest=sha256:5a087a0257a507a668968109e85711235b6acce4a61acd9196b58a8692e42705

Observation fd2fa48f-b422-4d1b-bb18-de44e1ed18ec · outbound

This paper cites create back-door access.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS create back-door access

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T04:46:12.418882Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.593949Z digest=sha256:6f8d76ff58bcc58e1c67f09e3a2eb5c6fb02321afd10df97769786ca99a1502a

Observation 7f3bb1e1-4f23-41da-b108-b7172c84ea93 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 17

Resolution
unresolved
raw_fallback, observed 2026-08-06T04:46:12.257934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.727835Z digest=sha256:1a220dffef8d3bc45e766059a95c3924665044bf924d8ccb0806f329abb2f1f5

Observation f9c30f5b-6e33-4ed7-8dbf-84cab6a37e97 · outbound

This paper cites INJECTION.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS INJECTION

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T04:46:12.085177Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-08-06T04:46:11.845318Z digest=sha256:81308e186492728dcee43f57dbf48af4f3d980cb7a19dee53943acd446380260

Observation fd3d5b42-2e5e-4763-ab2e-2b2addca7818 · outbound

This paper cites Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-08-06T04:46:10.420990Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T04:46:10.420990Z digest=sha256:79c6fb211ba067847af70b24ea2e6f7cbe1d0fed3ab2881c9212f097669ffd87

Pith citing papers

Observation ce20d99f-4d1d-475e-b6f8-128d419e93e4 · inbound

GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems cites this paper.

GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

Reference 31

Resolution
verified exact
arxiv_id, observed 2026-05-11T22:41:15.018458Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=pdf_text observed=2026-05-08T02:42:20.121207Z digest=sha256:6e81f42301b01f74622f7ed48f48c626990bac324d10e1618a70e5700e111cef

Observation 5b6114b8-3d60-4d89-9034-5b3a49d97c3f · inbound

When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems cites this paper.

When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

Reference 79

Resolution
metadata mismatch
local_arxiv, observed 2026-07-10T20:57:34.810598Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-07-10T20:55:21.031591Z digest=sha256:b88470531dd0b39587f314155a301c48f05b11a71a60d92fc1204f4afdd86ab8

Observation 8909be5d-67d9-4685-99c1-96fccbf5d288 · inbound

Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity cites this paper.

Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

Reference 63

Resolution
unresolved
no resolver link, observed 2026-08-05T22:07:42.304265Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T22:07:42.304265Z digest=sha256:1cba1f7e059555f06698e0ae084acecd7ebd7ab5653bfe881afab36b3c13f445