{"as_of":"2026-08-19T23:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b4585a2bd773bc8c86f87383d4cd5847849b31d19207bee7e856db61967302ee","coverage":[{"denominator":18,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":18,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T04:46:11.845318Z","state":"measured"},{"denominator":21,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":21,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:07:42.304265Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T20:57:34.795349Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":"2508.03125","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-07-10T20:57:34.795349Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","venue":"cs.CR","work_id":"7261bcb2-6754-4be6-8e9c-f084e7d1fade","year":2025},"citing_paper":{"arxiv_id":"2604.24477","last_updated":"2026-04-27T13:45:14Z","snapshot_observed_at":"2026-08-12T18:59:54.103670Z","submitted_at":"2026-04-27T13:45:14Z","title":"GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T02:42:20.121207Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2604.24477"},"observation_digest":"sha256:3600552c4ff4ca3a46bb25e4eb1cbc805be90171ef65f5d93af82e281a3a14e6","observation_id":"ce20d99f-4d1d-475e-b6f8-128d419e93e4","resolution":{"observed_at":"2026-05-11T22:41:15.018458Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":"2508.03125","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-07-10T20:57:34.795349Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","venue":"cs.CR","work_id":"7261bcb2-6754-4be6-8e9c-f084e7d1fade","year":2025},"citing_paper":{"arxiv_id":"2607.06807","last_updated":"2026-07-07T21:12:27Z","snapshot_observed_at":"2026-08-17T03:24:12.985218Z","submitted_at":"2026-07-07T21:12:27Z","title":"When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-10T20:55:21.031591Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2607.06807"},"observation_digest":"sha256:54e6e65a57771987cde095c657c2ec76cf93d0a5657b1a37c483e835a11e7c28","observation_id":"5b6114b8-3d60-4d89-9034-5b3a49d97c3f","resolution":{"observed_at":"2026-07-10T20:57:34.810598Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-08-05T22:07:42.304265Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-15T01:16:11.611065Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.304265Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:2735c5968cede1af0c11b89baa39a68547efba260ef40cf1884b9454a861b707","observation_id":"8909be5d-67d9-4685-99c1-96fccbf5d288","resolution":{"observed_at":"2026-08-05T22:07:42.304265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2508.03125/citation-record","integrity":"/paper/2508.03125/integrity","json":"/paper/2508.03125/citation-record.json","paper":"/paper/2508.03125"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:14.366172Z","title":null,"venue":null,"work_id":"668a76ca-2a3b-4cea-bcee-48dcfdd77f63","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.669642Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:1de4b7d600cf3d545310a7d2cd3675285298934e5f8827d74731d87853e3b4db","observation_id":"c0f86c1d-014a-4142-bffe-ed05bf0efcf8","resolution":{"observed_at":"2026-08-06T04:46:14.452881Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.03314","last_updated":"2023-06-05T23:55:37Z","snapshot_observed_at":"2026-08-16T16:19:58.635969Z","submitted_at":"2023-06-05T23:55:37Z","title":"Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.03314","snapshot_observed_at":"2026-08-06T04:46:10.472401Z","title":"In Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 1671–1685","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.472401Z"},"links":{"cited_paper":"/paper/2306.03314","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:1d0e97f029e7d7c02c4ef6bb99f9ae7164679baedee56a4fce702604f6a6d837","observation_id":"fe076a48-d3bd-410e-9027-70371b3697be","resolution":{"observed_at":"2026-08-06T04:46:10.472401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14529","last_updated":"2025-02-20T13:02:00Z","snapshot_observed_at":"2026-08-17T06:13:46.401607Z","submitted_at":"2025-02-20T13:02:00Z","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14529","snapshot_observed_at":"2026-08-06T04:46:10.566080Z","title":"do not attack","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.566080Z"},"links":{"cited_paper":"/paper/2502.14529","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:96e18c8c5fdd60ad64b6d7b5ac78b676f87a6dd260d1b425967da4c85a11313e","observation_id":"1a094781-add8-4a0b-a6e4-8dc7afdff49a","resolution":{"observed_at":"2026-08-06T04:46:10.566080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.302244Z","title":null,"venue":null,"work_id":"f2ef77fe-49da-47eb-ad91-56b108e38175","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.990354Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:95badcee5e946ae0057c7c47dc57fc1dc982d3566b38d4a542e1adc471d0b7cd","observation_id":"677407c8-c0e7-4811-8d4d-fb769219dee7","resolution":{"observed_at":"2026-08-06T04:46:13.323288Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:14.213629Z","title":null,"venue":null,"work_id":"d10f22c5-d02d-47bd-bc60-b9a9c224a137","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.730600Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:e15c12ca0d01bbb5f8d04ef407375debca73225c4e50011b0cc77676dbcc3053","observation_id":"74df91b9-18b1-42a9-b6c3-a53e76462dd9","resolution":{"observed_at":"2026-08-06T04:46:14.263127Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:14.045602Z","title":"Consider:","venue":null,"work_id":"ab70b4b0-7026-43b5-b998-903058be2780","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.799714Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:3efbb953bca457153163c0736f3660daacd82e146e97bccaab4a3bd8b00c53fa","observation_id":"51563ef3-f45c-4dd7-8822-b63a46618124","resolution":{"observed_at":"2026-08-06T04:46:14.100238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.846458Z","title":null,"venue":null,"work_id":"06bbe361-d258-4eb7-bf60-e2305d3f9b51","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.859601Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:a653306948796b12e9cc3df7d7817183b5154ff0eac77181c775bd04489a9745","observation_id":"e6e6c720-e9bb-41b6-9983-35e5e43fc005","resolution":{"observed_at":"2026-08-06T04:46:13.934181Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.705574Z","title":null,"venue":null,"work_id":"e21f6702-250a-4294-862e-484d29062d7c","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.900457Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:9a1d827a4184fc56999f23b03c9d6e9b7512c4fca58c7d9516a6d338290f5dca","observation_id":"d0bb996a-8dfb-4cff-9f5d-048756aabe45","resolution":{"observed_at":"2026-08-06T04:46:13.755727Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.467806Z","title":null,"venue":null,"work_id":"f00cde83-09c0-4c0a-8f1f-2aadbd3470d6","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.961554Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:bfae23a82695412a852b6a2732baa4706ecd03d9492de898cb390724a3ea0c3e","observation_id":"dd7d138f-30ff-4021-9492-38678be69478","resolution":{"observed_at":"2026-08-06T04:46:13.539913Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.135580Z","title":"Your response should include:","venue":null,"work_id":"fcf51ba1-0cbb-4b4a-b234-9fa97df8ff49","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.093082Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:73aad78dd7ea286e0ce055ab7fd3bddf066cd81173579f8dfee44383447e640d","observation_id":"dcfa664c-9165-4f07-8b32-75db81201654","resolution":{"observed_at":"2026-08-06T04:46:13.195379Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:13.019015Z","title":null,"venue":null,"work_id":"20f8a72c-f716-4611-837c-f3b8a6aaa48b","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.203848Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:fe2d7272c4b008a25991ad36cd728d46f534f62f225f85a209b823040be3afa8","observation_id":"7b2ea7bf-7beb-4424-86ff-165ddb625aed","resolution":{"observed_at":"2026-08-06T04:46:13.100042Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.802222Z","title":null,"venue":null,"work_id":"f1443c72-501b-49ac-8907-04479215e9d4","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.324232Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:851c559cd840f96cb790e04e71a0110f4386c4f7a08c6ccde09161c42d380ec3","observation_id":"2495a3da-cca8-4693-945f-9f588b9edfe3","resolution":{"observed_at":"2026-08-06T04:46:12.879735Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.677599Z","title":null,"venue":null,"work_id":"4f3e9578-4d28-4293-b462-e1dc7b23721e","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.373601Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:f0afff1ae0361cdbf30a1c4980e343b18363815c72daf0039b59b55b30bb4a4d","observation_id":"f63d8ec0-542e-4174-bb4d-1dd0e82e51d8","resolution":{"observed_at":"2026-08-06T04:46:12.697510Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.529667Z","title":"bypass security checks","venue":null,"work_id":"79471c47-5ac3-45de-b829-edc0902177d1","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.505104Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:0dcf495c34848fc8c858f19477d0d6ea7e7c8d7e35b45557676e4192a53bfd2b","observation_id":"cb846caa-b24c-4874-83e1-fc79d10ed438","resolution":{"observed_at":"2026-08-06T04:46:12.586451Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.309110Z","title":"create back-door access","venue":null,"work_id":"f72e16a0-e84f-4ae4-a7c2-b52c4dc2a8e3","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.593949Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:91b40b91f7f04af82d25d7f062dfcc92312ae3aec70d748c87548a87c3fce887","observation_id":"fd2fa48f-b422-4d1b-bb18-de44e1ed18ec","resolution":{"observed_at":"2026-08-06T04:46:12.418882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.222392Z","title":null,"venue":null,"work_id":"332666d4-3fd9-41c8-be5c-ad453be0af07","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.727835Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:fd63225dc34b5c10c76726d6c69d5f40721de4169e18dafd3471a2a4e4e57a1b","observation_id":"7f3bb1e1-4f23-41da-b108-b7172c84ea93","resolution":{"observed_at":"2026-08-06T04:46:12.257934Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T04:46:12.035455Z","title":"INJECTION","venue":null,"work_id":"eb3da7c2-dd76-4589-bd40-dc1392c6c504","year":null},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:11.845318Z"},"links":{"citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:43aec5e7049b1f294d64e3f178d77873a13c151712c0c9453bd944de7565a797","observation_id":"f9c30f5b-6e33-4ed7-8dbf-84cab6a37e97","resolution":{"observed_at":"2026-08-06T04:46:12.085177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.14348","last_updated":"2024-06-12T00:27:06Z","snapshot_observed_at":"2026-08-18T09:36:32.490699Z","submitted_at":"2023-09-18T02:07:22Z","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.14348","snapshot_observed_at":"2026-08-06T04:46:10.420990Z","title":"thinking","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-06T04:46:10.420990Z"},"links":{"cited_paper":"/paper/2309.14348","citing_paper":"/paper/2508.03125"},"observation_digest":"sha256:012fc59fb6b38028d0b1208a48ee3a7f94ae75d07ee34c4ac1409fd4291eff8c","observation_id":"fd3d5b42-2e5e-4763-ab2e-2b2addca7818","resolution":{"observed_at":"2026-08-06T04:46:10.420990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T09:40:34.488099Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS"},"reference_resolution":{"displayed":18,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":18},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 3 inbound Pith citation observations for arXiv:2508.03125."}