{"as_of":"2026-08-07T01:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b45071654b1f8b7eb1fee8994338da15cacc64654fb8c6d10af069a4786b411e","coverage":[{"denominator":23,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-14T22:16:56.848520Z","state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-19T23:26:15.658106Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-05-19T23:27:52.444391Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"cited_work":{"arxiv_id":"2603.28166","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.28166","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","venue":"cs.CR","work_id":"846ef222-b04f-4285-a9e3-3f81eaa73cb3","year":2026},"citing_paper":{"arxiv_id":"2603.28013","last_updated":"2026-04-09T20:28:36Z","snapshot_observed_at":"2026-07-06T22:51:00.579062Z","submitted_at":"2026-03-30T04:07:18Z","title":"Kill-Chain Canaries: Stage-Level Tracking of Prompt Injection Across Attack Surfaces and Model Safety Tiers","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:05.419099Z"},"links":{"cited_paper":"/paper/2603.28166","citing_paper":"/paper/2603.28013"},"observation_digest":"sha256:eb3d8879be270eb3346e1f519811731f5cb2503dd5d8c19b413896e36f5fdc44","observation_id":"806c1a05-acc3-4bad-b787-0c4378de9ccc","resolution":{"observed_at":"2026-05-14T22:18:04.541116Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"cited_work":{"arxiv_id":"2603.28166","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.28166","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","venue":"cs.CR","work_id":"846ef222-b04f-4285-a9e3-3f81eaa73cb3","year":2026},"citing_paper":{"arxiv_id":"2605.06393","last_updated":"2026-05-07T15:08:40Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T15:08:40Z","title":"Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T09:08:30.102711Z"},"links":{"cited_paper":"/paper/2603.28166","citing_paper":"/paper/2605.06393"},"observation_digest":"sha256:705f3c470e3d4d7248260df85f4ad8e4a513426b82dbafff94029c7009ea743f","observation_id":"00fb860b-50b0-46e9-824e-6493c1c3ed53","resolution":{"observed_at":"2026-05-11T20:26:10.968405Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"cited_work":{"arxiv_id":"2603.28166","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.28166","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","venue":"cs.CR","work_id":"846ef222-b04f-4285-a9e3-3f81eaa73cb3","year":2026},"citing_paper":{"arxiv_id":"2605.14859","last_updated":"2026-05-15T03:53:20Z","snapshot_observed_at":"2026-07-06T23:26:13.644646Z","submitted_at":"2026-05-14T14:05:58Z","title":"Do Coding Agents Understand Least-Privilege Authorization?","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-19T16:34:14.379419Z"},"links":{"cited_paper":"/paper/2603.28166","citing_paper":"/paper/2605.14859"},"observation_digest":"sha256:b0d4f7978fbb986911f0a2c54baa2ef719e789ba44364b360333f2e2133e4d8d","observation_id":"586ca2bf-c237-4689-aff5-94d4e3ccc569","resolution":{"observed_at":"2026-05-19T16:37:40.002337Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"cited_work":{"arxiv_id":"2603.28166","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.28166","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","venue":"cs.CR","work_id":"846ef222-b04f-4285-a9e3-3f81eaa73cb3","year":2026},"citing_paper":{"arxiv_id":"2605.17453","last_updated":"2026-05-17T13:51:34Z","snapshot_observed_at":"2026-08-02T00:37:59.573957Z","submitted_at":"2026-05-17T13:51:34Z","title":"Trust No Tool: Evaluating and Defending LLM Agents under Untrusted Tool Feedback","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-19T23:26:15.658106Z"},"links":{"cited_paper":"/paper/2603.28166","citing_paper":"/paper/2605.17453"},"observation_digest":"sha256:921115ce3584ad2028bf279eae47f5bc06f739dca94491ad5934af5d281b2a34","observation_id":"8ac61058-bdd4-46c4-8c69-0cf78a278a75","resolution":{"observed_at":"2026-05-19T23:27:52.450166Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2603.28166/citation-record","integrity":"/paper/2603.28166/integrity","json":"/paper/2603.28166/citation-record.json","paper":"/paper/2603.28166"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"dfe15457-85f8-4f58-ac63-39a68dcc7457","year":2026},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:aee2a98a86306c96de062b57573a1dd28077c56a5c4b84ed38b710fc8ae02a69","observation_id":"0f62c6ea-9b8c-4a93-ba25-dd50aae33835","resolution":{"observed_at":"2026-05-14T22:18:05.872178Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.emnlp-main.53","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Proceedings of the 2025","venue":null,"work_id":"90c79ba9-1fb8-4bb8-a186-3a5b291d8604","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:c0aaf78f118aa46676e4b9510acb0a3c76e321a154bc8c913b743d8ce2bfb029","observation_id":"79870d60-48e9-41de-9775-71fde54eecfa","resolution":{"observed_at":"2026-05-14T22:18:03.393538Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"67a7c4b7-3a52-4f2c-86e4-9063272dbcd5","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:3210644e13351690105c64567226df07202fc3b0b741a8b78054d4612e51fa3e","observation_id":"c43bd667-9f0e-4533-acc6-ee58228d41cd","resolution":{"observed_at":"2026-05-14T22:18:05.867593Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-long.890","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"0a8173b6-7469-45cf-a7ce-022e8ed229a5","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:1be7e0dd2576a8895155b3e4a3a9fc0f1b26d712fb570b6db1d10c2ed9ceb9e7","observation_id":"098409ae-934e-4a18-802a-7d9d27c447c6","resolution":{"observed_at":"2026-05-14T22:18:03.410366Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-06T07:36:52.841128Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":"2503.18813","doi":"10.48550/arxiv.2503.18813","metadata_source":"pith","pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Defeating Prompt Injections by Design","venue":"cs.CR","work_id":"86405b86-1c51-4042-9b04-aff0b6541411","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:a6a5320d00923b004a29175c0a983fe2d6a651f293da291fdbd1dd7845a5b70f","observation_id":"40ddf811-1ace-4073-827f-239940e1f6df","resolution":{"observed_at":"2026-05-14T22:18:04.353353Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-15T18:20:36.91954+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T18:20:36.91954+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"0e84f1c4-9882-4b08-9725-525c7b321458","year":2024},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:1e8bf0621ec265858d6a871db7e7d590fee30ae400ca88774e4da238e741ae82","observation_id":"6dfb4c78-c581-4820-8055-b2357936c95f","resolution":{"observed_at":"2026-05-14T22:18:05.889426Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"152b8b6f-9e04-42ed-84ab-c3d93730982c","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:ced97227a28aa24ac60dac507f984e2ff201a6bd5460a0475a23c25a3b02a682","observation_id":"5bde3dfb-c2a5-4f70-8126-66898e66105a","resolution":{"observed_at":"2026-05-14T22:18:05.863104Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.15253","last_updated":"2025-06-18T08:30:36Z","snapshot_observed_at":"2026-08-06T23:58:15.219032Z","submitted_at":"2025-06-18T08:30:36Z","title":"RAS-Eval: A Comprehensive Benchmark for Security Evaluation of LLM Agents in Real-World Environments","version":1},"cited_work":{"arxiv_id":"2506.15253","doi":"10.48550/arxiv.2506.15253","metadata_source":"arxiv_reference","pith_arxiv_id":"2506.15253","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2506.15253 , year=","venue":"ArXiv.org","work_id":"1307b8fe-e37b-4327-869c-e2359cdfc1ee","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2506.15253","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:62bf3d5d1fccc30935fcd8caa8a7eea0cec9aa4016e410cd5321af879a2e03f2","observation_id":"1aab66c6-34ae-4d9e-bdaf-350397be20b1","resolution":{"observed_at":"2026-05-14T22:18:04.361136Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"5764.362398","doi":"10.1145/3605764.3623985","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec @ CCS 2023)","venue":null,"work_id":"0b235739-d106-431c-aed9-3675d531c886","year":2023},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:93a420e8eed3e44c29e671fed23651a3a3ca41d0a52bdac967502235933d4abf","observation_id":"8c670657-3759-4614-823b-82f44229b76e","resolution":{"observed_at":"2026-05-14T22:18:03.355125Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T05:19:17.163767+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6598.371321","doi":"10.1145/3706598.3713210","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Don’t Forget the Teachers","venue":null,"work_id":"4e5a9e80-564a-4a4e-a263-e44f777eeb77","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:7eeb75e392f97a132473050d1cd905f14b8977d2fa94da652cb452eb806b42c7","observation_id":"236473ac-8897-448b-80f9-c27afc936abc","resolution":{"observed_at":"2026-05-14T22:18:03.371857Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-05-21T08:52:22.707996+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-21T08:52:22.707996+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.26702","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Delegated authorization for agents constrained to semantic task-to-scope matching","venue":null,"work_id":"18ea5d6b-bf10-4027-9287-7670b8f13398","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:59ea879ab8e87e0deb9afe3e553b50b15b9c16936cf7a5526625465e7c68f217","observation_id":"36cf52ab-80bb-445c-ad7c-815346045032","resolution":{"observed_at":"2026-05-14T22:18:04.373916Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/2025.acl-","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-01T01:05:12.524976Z","title":"Agent-RewardBench: Towards a unified benchmark for reward modeling across perception, planning, and safety in real- world multimodal agents","venue":null,"work_id":"1ef694be-4483-4d1c-b319-30be63d024de","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:4a8895fb2d87fe69966222efd4e441fba93762864f01d9a3e795825158ce7442","observation_id":"9c3e0028-6341-4b93-88fa-c553aaa26fd4","resolution":{"observed_at":"2026-05-14T22:18:03.378474Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.02556","last_updated":"2025-12-02T09:25:14Z","snapshot_observed_at":"2026-07-31T23:49:25.878472Z","submitted_at":"2025-12-02T09:25:14Z","title":"DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models","version":1},"cited_work":{"arxiv_id":"2512.02556","doi":"10.18653/v1/d18-1512","metadata_source":"pith","pith_arxiv_id":"2512.02556","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models","venue":"cs.CL","work_id":"07c85cc5-4086-4abc-823b-6d0f4ff784d0","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2512.02556","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:71e2b630511e561ef8479612f8c4437553c3345b1562429deef1b90acd51f362","observation_id":"5d857eb3-6c95-4746-9d07-b33b0d7086ad","resolution":{"observed_at":"2026-05-14T22:18:04.333729Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":"2306.05499","doi":"10.48550/arxiv.2306.05499","metadata_source":"pith","pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Prompt Injection attack against LLM-integrated Applications","venue":"cs.CR","work_id":"977b4683-bba6-49d6-8f3d-496c41cb7fac","year":2023},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:86ef4abf9df033bfb6e85a160a491cae69ac3fd50849611daacab2a498953754","observation_id":"1fdd51fd-7a93-4856-b9af-770eeb0dae9c","resolution":{"observed_at":"2026-05-14T22:18:04.367445Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.11584","last_updated":"2024-04-17T17:32:41Z","snapshot_observed_at":"2026-08-04T23:37:27.678120Z","submitted_at":"2024-04-17T17:32:41Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","version":1},"cited_work":{"arxiv_id":"2404.11584","doi":"10.48550/arxiv.2404.11584","metadata_source":"pith","pith_arxiv_id":"2404.11584","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Survey","venue":"cs.AI","work_id":"d41cecd0-887c-48d8-a3b1-bdd1b68c7053","year":2024},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2404.11584","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:625aae8d7f5c6df24bd37003a9e834f827321e784a4a671d36d982d2f0ab2e42","observation_id":"84967782-3115-4475-a7d3-13bd054e62d1","resolution":{"observed_at":"2026-05-16T23:16:41.836860Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.05156","doi":"10.48550/arxiv.2510.05156","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"VeriGuard: enhancing LLM agent safety via verified code generation","venue":"ArXiv.org","work_id":"2dd53484-c7be-4195-a808-1d121845c686","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:45d16a16ef61bca58822d719db40e5da0cebd29d1cc2d28f2cf757c6601d3987","observation_id":"fe4a2733-1029-46a8-850d-1e3042212830","resolution":{"observed_at":"2026-05-14T22:18:04.381176Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:10.103868+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:10.103868+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T04:31:57.267275Z","title":null,"venue":null,"work_id":"c44961d5-9076-472d-be67-87224e0566ed","year":null},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:f4e30d56f5ad6ce3ff8b43a84b7d90ae912ee58471264c4e16ad6ebcf5b3f7eb","observation_id":"daa8aea8-2c0e-4aca-b73b-8581d8f1edb3","resolution":{"observed_at":"2026-05-14T22:18:05.876423Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03267","last_updated":"2026-05-01T23:55:43Z","snapshot_observed_at":"2026-08-02T10:52:10.211700Z","submitted_at":"2025-12-19T07:05:38Z","title":"OpenAI GPT-5 System Card","version":2},"cited_work":{"arxiv_id":"2601.03267","doi":"10.48550/arxiv.2601.03267","metadata_source":"pith","pith_arxiv_id":"2601.03267","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"OpenAI GPT-5 System Card","venue":"cs.CL","work_id":"ca87689a-0d29-4476-b504-b65dbbb08af4","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2601.03267","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:0527adc81ff85c6c10d364761e2ff331ae40baee54cf2f9ed67a6310564df932","observation_id":"75a85e32-fc8d-40be-8ff4-df27dc5fc9d9","resolution":{"observed_at":"2026-05-14T22:18:04.346670Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-03T00:38:11.458508+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:b93d47d475c057262bdb6d90eab149a0d4ebac5e48fe0bf42c872235cc57d86e","observation_id":"f0986db5-7fd4-40a7-a930-7e1b012cec8e","resolution":{"observed_at":"2026-05-14T22:18:04.387283Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6db42359-b9e6-444b-aa66-a30f945160a1","year":2025},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:12c155b8a36b68f1e2aadde0eb43892a53a6ed87e66c4516cd69bd5a07b2cdee","observation_id":"9539f15f-2afe-4e19-bdfd-63b130f52393","resolution":{"observed_at":"2026-05-14T22:18:05.880612Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"67b406eb-3756-4504-bce4-57cfa778a2c9","year":null},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:7527d86bd0ab7018f1fb998d52b50e61237bd67417e470b9c88ea468540e6bf1","observation_id":"21457e76-a1e6-420d-8123-7a85410546f2","resolution":{"observed_at":"2026-05-14T22:18:05.885155Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"3529.366378","doi":"10.1145/3663529.3663786","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"InCompanion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering(Porto de Galinhas, Brazil)(FSE 2024)","venue":null,"work_id":"100c4aae-461c-4872-9802-e884c7a032a3","year":2024},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:05ddebe6ce216a5bcace53c1c8f0543541a0b222b642d5629e738d82e32e3452","observation_id":"9d84ec95-b666-4ee4-b015-5eeac6927593","resolution":{"observed_at":"2026-05-14T22:18:03.404372Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"1620.369500","doi":"10.1145/3691620.3695001","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"ce65ca60-f7ac-4c82-a79a-e7d1e5d2ef27","year":2024},"citing_paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-14T22:16:56.848520Z"},"links":{"citing_paper":"/paper/2603.28166"},"observation_digest":"sha256:ee18d835a3ac21345ca2719d41e205e08ca53bbb32f34a049f4c38fb5fc970f1","observation_id":"6d2119fb-f001-4b5d-9e56-f64ea2a81a9e","resolution":{"observed_at":"2026-05-14T22:18:03.386590Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2603.28166","last_updated":"2026-04-20T07:37:21Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T07:10:51.130581Z","submitted_at":"2026-03-30T08:35:00Z","title":"Evaluating Privilege Usage of Agents with Real-World Tools"},"reference_resolution":{"displayed":23,"state_counts":{"malformed_identifier":2,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":7,"verified_exact":13,"verified_fuzzy":0},"total_outbound_references":23},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 23 of 23 outbound references and 4 inbound Pith citation observations for arXiv:2603.28166."}