{"as_of":"2026-08-15T02:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fe951022d3e101690ca4255da0fec145031dd0b4ff20193745934804fbb9c3e3","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T16:08:51.850890Z","state":"measured"},{"denominator":60,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":60,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:03:46.290627Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.05509","snapshot_observed_at":"2026-08-04T01:03:46.290627Z","title":"Waaa! web adversaries against agentic browsers,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00202","last_updated":"2026-07-31T18:27:12Z","snapshot_observed_at":"2026-08-07T03:19:41.307598Z","submitted_at":"2026-07-31T18:27:12Z","title":"From Monoliths to Swarms: A Study of Attack Surface Evolution in the Transition to Multi-Agent Web Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T01:03:46.290627Z"},"links":{"cited_paper":"/paper/2605.05509","citing_paper":"/paper/2608.00202"},"observation_digest":"sha256:cec47db98a42f6cf3a26cd4cd9ee26904138f23d1b8ca127be6b645f03682570","observation_id":"d5e91a1d-6d49-4f67-83c7-a517464f2d06","resolution":{"observed_at":"2026-08-04T01:03:46.290627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.05509/citation-record","integrity":"/paper/2605.05509/integrity","json":"/paper/2605.05509/citation-record.json","paper":"/paper/2605.05509"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Blog | Windsurf","venue":null,"work_id":"8ced6721-a534-4029-aaef-f46f95a08870","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:cb6f75e6ed8632a7fa5f75fda5141926f3a0f22427b6b4a5a2e2a9ec93387fce","observation_id":"1c419c97-f5bd-44a9-8615-7ea53a3dfaa0","resolution":{"observed_at":"2026-05-26T10:37:35.890841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Cursor Docs","venue":null,"work_id":"af6a196a-f23f-4162-857a-cf01b298686c","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c5281be4b5256754a09ffe0559c92031556906f43321be1f212cfe998de27929","observation_id":"e67723d8-8af0-4bdb-87a7-427b2aba9e80","resolution":{"observed_at":"2026-05-26T10:37:35.927912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Dia Browser | AI Chat With Your Tabs","venue":null,"work_id":"57e2b45c-2383-49b0-bcb3-4b57f6fd0a34","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:9c97f92b992c242d4cdeda126becc078d8bfc2458a1600c4d663fa297ed52af1","observation_id":"52900203-7ffd-42f4-8838-d8af703a8f66","resolution":{"observed_at":"2026-05-26T10:37:35.917116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].GitHub Copilot·Your AI Pair Programmer","venue":null,"work_id":"a3068333-d7d8-474a-8600-84066a477fc1","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:1f9241d0ce37a79ad02de241c7c2ee5ee7d2b89abca214fa6f0325c60400da52","observation_id":"8bb4f1cd-03ea-4cfc-b587-932eb3e93383","resolution":{"observed_at":"2026-05-26T10:37:35.894940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Introducing Claude Sonnet 4.5","venue":null,"work_id":"445666d2-c351-4bb1-9c9d-d66a285c9c8c","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:aeda622ebe04685f1fc1827c8baa25ab5b82cfa22b9abe97e4234e785480e143","observation_id":"0df8c0e4-e3a7-49f9-9973-0aa4d6c72a41","resolution":{"observed_at":"2026-05-26T10:37:35.856846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Microsoft/Playwright-Mcp","venue":null,"work_id":"3297da24-0a74-44b0-bfeb-4c3315b92778","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:24adb0f73b999373029c3e8945470dffa344fb3e6491025b057c1810421eb795","observation_id":"a11c51be-fbe3-40b3-becc-bb1436cd3a09","resolution":{"observed_at":"2026-05-26T10:37:35.875023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"d.].Piloting Claude for Chrome","venue":null,"work_id":"ef93cc01-4b6e-4bfa-b670-860352d468f6","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:7897069dea47cbe05a95580a8cd8b0bb38af29622fc89275e988dc03ca9701bf","observation_id":"a7fcc242-4d20-4bd5-8962-bb13208134ce","resolution":{"observed_at":"2026-05-26T10:37:35.870327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www","venue":null,"work_id":"68782502-4938-4ec5-a6c5-952f45e11633","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:08a8d3d2da9b86930dd4eababac4866ab93bf691ea26f96b6d73bb1d0f84509b","observation_id":"0edcc8ca-bc52-4144-85b8-d3ee6bd56424","resolution":{"observed_at":"2026-05-26T10:37:35.909401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://brave.com/blog/comet-prompt-injection/","venue":null,"work_id":"b84300e3-b46c-40ce-8b79-24106279e096","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:a6f1a4cbd1374410de654eadc76f3b26f3e05800a8698baafcda86ab3a672d89","observation_id":"336baa17-e3cd-4082-a18f-bbaacca67797","resolution":{"observed_at":"2026-05-26T10:37:35.902086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://brave.com/blog/unseeable-prompt-injections/","venue":null,"work_id":"dfec192b-a82e-45f4-9478-a4b9cf3f68b8","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:2c2aabcce9c4f77ce5259894055f42690a56ce6b8ad801e2730ef94baece15f5","observation_id":"69f2502a-413d-41e2-bcb6-5289eed99dd7","resolution":{"observed_at":"2026-05-26T10:37:35.931589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://neuraltrust.ai/blog/openai-atlas-omnibox-prompt-injection","venue":null,"work_id":"74b796e1-5703-499b-8db7-ad9e681d2184","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:3e948c2242c761ac9a1a0e53f79214249e2d9e60135fc3d8b88297a6af142c08","observation_id":"0d53d891-823f-4ea2-a0b5-1908b6e2d6cd","resolution":{"observed_at":"2026-05-26T10:37:35.913263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Microsoft Copi- lot","venue":null,"work_id":"31d73e61-3e42-499c-859f-99a5d96791eb","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:151670bec9f276e585836148dfa702e3608cf3f37b65e05904e8bdf384a939d9","observation_id":"951f7ad4-74f6-4167-b53c-f894ed499516","resolution":{"observed_at":"2026-05-26T10:37:35.924140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Browseros-Ai/BrowserOS","venue":null,"work_id":"d30638b1-1047-400a-ba16-ca53241ad25e","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:908d80dcdce85b3917c534b48c734966ffe40d94b60742499a71836c88562b7c","observation_id":"602fd46b-236b-4e8d-8784-cea2c01677f7","resolution":{"observed_at":"2026-05-26T10:37:35.920851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www.claude.com/product/claude-code","venue":null,"work_id":"dbe6e197-0a1b-4288-9eae-ecaa08e2f90e","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:e3c5dcea67ac5047c302f632b2303eafeab1528f4b773bc3d2bff3b5bdecdb6c","observation_id":"555ed348-4805-4573-9a3f-4490385f5967","resolution":{"observed_at":"2026-05-26T10:37:35.864370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://www.perplexity.ai/comet/","venue":null,"work_id":"959ca00e-4041-4114-9fa1-6cbcdf31c107","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:013b558d3c59b6a98ea31d550d1a21bcf88e53adb69edcc23bd1c485b6ddd26e","observation_id":"532de15e-6b97-4209-9e9c-867907ebba13","resolution":{"observed_at":"2026-05-26T10:37:35.898572Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https: //www.google.com/chrome/ai-innovations/","venue":null,"work_id":"a875cdee-163a-496c-847a-aa15bd83482f","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:2433d73ab2889471dddb70201a7901300ea81eb6c2eed5e8f56b2cb409545017","observation_id":"03c9e367-5e5d-46bd-b288-340500f90eb8","resolution":{"observed_at":"2026-05-26T10:37:35.939138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Introducing ChatGPT Agent: Bridging Research and Action","venue":null,"work_id":"617fc07b-73fd-4f48-8224-f400a9e2d54e","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6b9e1fb764cdff6c84b4fad1b7e98ca15c3bd0e9cc7296c799eff0bfd5a943e8","observation_id":"4431a5a1-c483-4343-87b4-f14bdf32fec8","resolution":{"observed_at":"2026-05-26T10:37:35.905768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"https://openai.com/index/introducing-chatgpt- atlas/","venue":null,"work_id":"8d6960ce-4532-4d4d-b91f-ac7d47ea17df","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:4f06a89c0220ae0eef32180c1a52ffe4e2b64f2aa5d6b7ea3af46b7988eb997b","observation_id":"bcdb6ad0-b2ee-49e6-acfa-f895b8f288f2","resolution":{"observed_at":"2026-05-26T10:37:35.860688Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Google DeepMind","venue":null,"work_id":"f1445e25-359f-44a4-b8c3-9d2346601433","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c81d7661d8a04165824005809664f8a9174b0dbd4dfdf2f1a268322756d9bd59","observation_id":"ca5a0375-0af5-4363-8ee8-23ba9e6fc670","resolution":{"observed_at":"2026-05-26T10:37:35.883211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Steel-Dev/Awesome-Web-Agents","venue":null,"work_id":"1332eb39-85de-4825-9ed2-742e924694f5","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:2eef5f9395ed81976c98ba366de655d199347e441539a1ece7fe67ad8157d8d4","observation_id":"fdc1830f-7b73-4fd0-b80c-c1ee43103937","resolution":{"observed_at":"2026-05-26T10:37:35.879683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2ed10696-b34e-4080-8666-8a2154e7dd6f","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:ddf721e8cf22bc6dfa6a1167aec16a4390fe27dcc832165d515340eca8ea1a37","observation_id":"55b5d5d1-cc9b-4283-8a66-5a5ef3332a45","resolution":{"observed_at":"2026-05-26T10:37:35.887088Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"In2010 23rd IEEE Computer Security Foundations Symposium","venue":null,"work_id":"73b4e7b5-a47a-4e70-a30a-7811816d662e","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:128c6e5316012a6c8d995ae661ee1e14ffb69fc0ae10df0825b90ce01a030306","observation_id":"cd9b2fba-01dc-40d7-8385-aae0848c7ef5","resolution":{"observed_at":"2026-05-26T10:37:35.942809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"da3e4597-b984-4a97-a25f-b5d69ebcf1aa","year":2008},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c7d449879f3525000babe51537ca227c99be13a1f7d0aaae53ee1b8f74595d49","observation_id":"52b3999c-49e8-4a67-977d-908c25a05567","resolution":{"observed_at":"2026-05-26T10:37:35.871615Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2c4f7e9c-c954-476f-b9fb-8db2d99ca005","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d35f73a3338717ed6cffe32ebb1463ccbfcb22c9a45b80d5495fcedf9cbe7673","observation_id":"92bd8f86-64e5-4df6-94b0-bc2fca2b60a4","resolution":{"observed_at":"2026-05-26T10:37:35.935381Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2504.14064","doi":"10.48550/arxiv.2504.14064","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Doomarena: A framework for testing ai agents against evolving security threats","venue":"ArXiv.org","work_id":"09e11bfc-6712-45e6-b9d9-d5dbb0b7481d","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:1fc0df7e650489c7db0c393cfe2d20e9c928639158e41aef555024fcd96dbde6","observation_id":"ce6ba851-3812-4bd2-920d-edc8cd47fb21","resolution":{"observed_at":"2026-05-08T20:34:10.332811Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2502.20383","doi":"10.48550/arxiv.2502.20383","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Why are web ai agents more vulnerable than standalone llms? a security analysis.arXiv preprint arXiv:2502.20383","venue":"ArXiv.org","work_id":"818e90ef-0523-46c1-b07b-91ceb84aba21","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:984a7f271a158ef3e105f510a7a7f9b5dc32294d405814fca09ec25054ad60b0","observation_id":"92a8f93c-46bc-48ca-9d7f-8bcee0d97088","resolution":{"observed_at":"2026-05-08T20:34:10.250983Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/1772690.1772720","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"0f974b81-2102-4f3c-afc6-37bd07377cbc","year":2010},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:18beb4255b0675127be2c032c3628611e6231dcdde1fb73f19f783e5d0c0412b","observation_id":"57e3903d-aece-45d0-81c3-34544df52604","resolution":{"observed_at":"2026-05-08T20:34:10.268831Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.06070","last_updated":"2023-12-09T05:57:46Z","snapshot_observed_at":"2026-08-14T08:19:18.935225Z","submitted_at":"2023-06-09T17:44:31Z","title":"Mind2Web: Towards a Generalist Agent for the Web","version":3},"cited_work":{"arxiv_id":"2306.06070","doi":"10.48550/arxiv.2306.06070","metadata_source":"pith","pith_arxiv_id":"2306.06070","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mind2Web: Towards a Generalist Agent for the Web","venue":"cs.CL","work_id":"e26f5a00-c007-439d-83f6-7900f5687b6b","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2306.06070","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:e92203c52848ccd8703f85c54503e6a48b2fc219a28f7fb02e3cd71a3e27cf51","observation_id":"9ae5ffac-5d9f-4c85-a312-db3ddd699190","resolution":{"observed_at":"2026-05-15T20:05:16.335224Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:29.437492+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:29.437492+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.18575","last_updated":"2025-05-16T22:42:29Z","snapshot_observed_at":"2026-08-10T18:17:57.457186Z","submitted_at":"2025-04-22T17:51:03Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","version":3},"cited_work":{"arxiv_id":"2504.18575","doi":"10.48550/arxiv.2504.18575","metadata_source":"pith","pith_arxiv_id":"2504.18575","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks","venue":"cs.CR","work_id":"bf1914b2-fd32-4768-a4d5-84720606d71b","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2504.18575","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:7a164acb50b48973a6b95846f35d0e2cac949d26c09f313696c887ffb36c3de5","observation_id":"fe31546a-40b7-4773-97fb-739b875e752b","resolution":{"observed_at":"2026-05-15T22:22:05.737978Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b3e4e3eb-3da3-4ca1-afe7-3f9fc7c9fe25","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:306a641a013abf1e21865e02f2a5635779f21372beabed6765004dfaa4b31759","observation_id":"9384842b-bb28-45f8-bc16-58547cf30aa4","resolution":{"observed_at":"2026-05-26T10:37:35.986802Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8dcf33c1-e24a-48b9-a1e0-a4c0ebfc257e","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d5da68f1ee7cd4e73574c05f8d8a08405ee702e8c5894e8774121c66d02e637d","observation_id":"45ae01af-e690-4c06-9f94-cf39124bd59c","resolution":{"observed_at":"2026-05-26T10:37:35.961729Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"2c27c435-b839-49a0-9a95-b5b2d84e8b70","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:c5d7d09363f6807b82736cffddb659cceea079fc50be28dd49613ed734c802a1","observation_id":"7dd976c1-8faf-494d-a32e-51958ae45158","resolution":{"observed_at":"2026-05-26T10:37:35.990014Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5eae1fed-8228-4e4c-aaa9-1bed1849b634","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6a1a3f53cdaf3094ef88bbe390bf502c9fc40bfa89b24ce9b34046e47910382b","observation_id":"b2dd0e0c-6fb3-4fd4-83af-51ea854b5d2e","resolution":{"observed_at":"2026-05-26T10:37:35.950521Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wang, Stuart Schecter, and Collin Jackson","venue":null,"work_id":"20c798f2-657e-492f-8105-c2c3baf9b627","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:d8104a9725c2b1f6477374f6bd69be286267bde91122ae2d00a0112e0768d0a1","observation_id":"493c9234-ac83-4512-9a38-14aa7f9a7326","resolution":{"observed_at":"2026-05-26T10:37:35.954553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a479d7fb-8f1d-4668-83bf-22f9beb85b0b","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:f73cff38ee77cb6acf65f2875b3b66a37cb59d7cbf836919dee561c509e9505f","observation_id":"15d5cde9-64d5-4718-bb28-8b29f640c37a","resolution":{"observed_at":"2026-05-26T10:37:35.983412Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3460120.3484739","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"b9e8ef65-2e05-4686-9db1-d829361af24a","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:608fe489186be0fda146d514c2a947e42a7920cc8918b59b753cd69fb8498ea4","observation_id":"ac08d2be-6bb4-41dc-9e11-617d8605cda7","resolution":{"observed_at":"2026-05-08T20:34:10.280661Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"69963420-2181-4d3c-885b-01af677b6152","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:9e245cec1c70729f52914fe71a1939fec849cfc9dee4692dccd08cc078116fa6","observation_id":"0ef53459-d09d-4533-bb11-dbb72268ca9e","resolution":{"observed_at":"2026-05-26T10:37:35.976022Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2409","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T14:32:18.518488Z","title":"04984,arXiv:2409.04984,doi:10.48550/ARXIV.2409.04984","venue":null,"work_id":"0871a597-799e-4f81-987b-4fdabb216cc0","year":2022},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:64465aa6bce26b54ec103824f7a26444cce7b98b7768dbd126330f4cb1328810","observation_id":"d4650d44-490f-4f1d-b8e7-88f9c4f49a4c","resolution":{"observed_at":"2026-05-08T20:34:10.284957Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-30T09:55:09.836975+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-30T09:55:09.836975+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.15561","last_updated":"2021-12-31T17:32:59Z","snapshot_observed_at":"2026-08-13T17:05:32.092919Z","submitted_at":"2021-12-31T17:32:59Z","title":"SOK: On the Analysis of Web Browser Security","version":1},"cited_work":{"arxiv_id":"2112.15561","doi":"10.48550/arxiv.2112.15561","metadata_source":"arxiv_reference","pith_arxiv_id":"2112.15561","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"arXiv (Cornell University)","work_id":"94fb33bc-9546-4e82-bbfb-3d92f28318df","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2112.15561","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:f43cdd1e12b043a7c698ef7cd1cf9cd787d728f540d3709b117ebe492c171aa1","observation_id":"937e2bb7-4ec5-44e1-a0eb-225006a77524","resolution":{"observed_at":"2026-05-08T20:34:10.306349Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.15561","last_updated":"2021-12-31T17:32:59Z","snapshot_observed_at":"2026-08-13T17:05:32.092919Z","submitted_at":"2021-12-31T17:32:59Z","title":"SOK: On the Analysis of Web Browser Security","version":1},"cited_work":{"arxiv_id":"2112.15561","doi":"10.48550/arxiv.2112.15561","metadata_source":"arxiv_reference","pith_arxiv_id":"2112.15561","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"arXiv (Cornell University)","work_id":"94fb33bc-9546-4e82-bbfb-3d92f28318df","year":2021},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2112.15561","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:a13e1f86caa2695492eb30b467de29c6326776017797e89988220f57e432d02a","observation_id":"c4fd6af6-36cd-4164-ae35-47f33e54519c","resolution":{"observed_at":"2026-05-11T18:21:09.852197Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2408","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T14:37:02.992133Z","title":"arXiv (2024).https://doi.org/10.48550/arXiv.2408","venue":null,"work_id":"01b77655-4ab0-4695-b5b4-4c3ca8a5658d","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:ec18fd02eafa11732c461d448a3e71d02e537afd146ec155afd5ae6c5479db86","observation_id":"40b08949-07b5-4a90-8b60-8389227e1e8d","resolution":{"observed_at":"2026-05-08T20:34:10.262255Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3359183","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T13:06:58.305287Z","title":"Mathur, G","venue":"Proceedings of the ACM on Human-Computer Interaction","work_id":"554cfabb-1a39-4348-89f6-84d79d932071","year":2019},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:75e73145b44cd7d4f72bf338d5bb213a721d88546fae0b1f4fab3f2359ea9c58","observation_id":"29ef2c65-fda4-4e18-be12-ebf8a5b70930","resolution":{"observed_at":"2026-05-08T20:34:10.255248Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-19T15:22:25.516433+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-19T15:22:25.516433+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.16950","last_updated":"2024-10-22T12:24:41Z","snapshot_observed_at":"2026-08-12T22:17:39.134750Z","submitted_at":"2024-10-22T12:24:41Z","title":"Breaking ReAct Agents: Foot-in-the-Door Attack Will Get You In","version":1},"cited_work":{"arxiv_id":"2410.16950","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.16950","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Breaking react agents: Foot-in-the-door attack will get you in","venue":null,"work_id":"028f4cf7-3266-42c9-9708-9303fddc19d7","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2410.16950","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:3b2b37540d5ed03068f8205d6b01a8b93d84476158d4d65ab4ef9e5347fdaf58","observation_id":"34cdd629-50ad-40e5-9d26-38014056f2c5","resolution":{"observed_at":"2026-05-11T18:21:09.884262Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"16563bc1-459c-4eef-b701-50266716ca77","year":2020},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6a5cd7bf6e83b214c72b9f630dcea91139ba14d95e46e407d08cff70df30cc94","observation_id":"0f0b9e3f-7a19-4d22-877c-5501f7dc8460","resolution":{"observed_at":"2026-05-26T10:37:35.968748Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"843a41d2-e4d0-4cfb-ae88-f1863243350f","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6d952faca2d9969615bab447716c621adab28245eb63b536428c3adbd9226de8","observation_id":"8bff3e3f-9b98-445c-9199-68c35d9a2b84","resolution":{"observed_at":"2026-05-26T10:37:35.979838Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4b6d0136-5045-40e4-b4bb-c57ff6dd4ea0","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:e42ea48ee7e6d0d00526858377f6f2a35d0b35aad05f4a78e081846bd9eaff14","observation_id":"b71f725d-e6fa-4874-8add-b79485bde695","resolution":{"observed_at":"2026-05-26T10:37:35.957928Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"95d8887f-fc4c-4143-a812-eb86d496e8ff","year":2026},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:be46ed79550bda6f23bb6259e9c66eb4af562729b9de5864e7c532b1a2553b27","observation_id":"608fc78e-cf4c-4cb5-bfd7-43ce95c619f8","resolution":{"observed_at":"2026-05-26T10:37:35.965640Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"d287ae6a-6946-4d53-8dc3-a002fcf80ae1","year":2019},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:1d472206f524d5b42506b1c16ccbede051378e739bbb2c9d8ec1f172b144204d","observation_id":"f1047054-ec9a-4f66-ae72-b7488ae385a5","resolution":{"observed_at":"2026-05-26T10:37:36.001688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6a06e789-38c9-40d8-9eb5-599ea2eb8fd4","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:dca46902720a7e62f0aba41c90aef1f66448297681cd365417d7d1a917464f53","observation_id":"3919e680-baf8-4257-8156-0219356095c7","resolution":{"observed_at":"2026-05-26T10:37:35.993400Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"6c611c90-d360-46a1-97d1-5a08cd7fabdc","year":null},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:5e3242bf9f7e1ac099dae36ec96b7b9783cc75d7a792b6124bae83cf9b9a0bd1","observation_id":"225ef129-70b1-42a2-9771-a2efa86e87c6","resolution":{"observed_at":"2026-05-26T10:37:35.946540Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2465.31324","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"ecdfa9cd-aa7d-456e-88b0-4e6b8e2fc774","year":2017},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:024d29b696b647f11e9557bb261670bb206cc8aacb08c4d6622a5fda0ba35283","observation_id":"56dbb040-da4d-4568-ab64-90bf533628c7","resolution":{"observed_at":"2026-05-11T18:21:09.900125Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c7fa626b-7722-47a6-908e-eac0a78be21b","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:6278d4858e064877d951d5d01b901e0300f46168b45307a3b7eadd521ac0241c","observation_id":"26639ba9-e692-4141-80bf-07aaf973a4e9","resolution":{"observed_at":"2026-05-26T10:37:35.997671Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.14722/ndss.2020.23xxx","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"LillOA (Université de Lille (University Of Lille))","work_id":"b17652fd-0678-4e9f-8ee6-96137be011a2","year":2020},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:10441aa7fed0af2c0e5823f18d475b7c00bb01c55d3dfa6ab817b1e2135d18bb","observation_id":"602f766d-4c4a-4e9e-814b-88209f46b903","resolution":{"observed_at":"2026-05-08T20:34:10.274513Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"4c5c132c-72ff-43aa-af31-c164e7d7a95d","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:32c2a3c4dda96522fba2657450aab1d1ab828c771b8b6ad2475f61a36c8a2b20","observation_id":"1fa75193-2bef-48f0-9188-70c8d78d2f38","resolution":{"observed_at":"2026-05-26T10:37:35.972282Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2402","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T23:56:38.370412Z","title":"Quantum error thresholds for gauge-redundant digitiza- tions of lattice field theories","venue":null,"work_id":"fe54368a-46a7-407d-be53-6236d622919e","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:ed90ad81d5c5e6543ccc717d20913eca677f77a75418888a93c41ee7e8d05454","observation_id":"2c89ae1f-6bcf-4081-a7d7-85d9ca42ff34","resolution":{"observed_at":"2026-05-08T20:34:10.340152Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-23T14:52:59.713726+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-23T14:52:59.713726+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":"2210.03629","doi":"10.48550/arxiv.2210.03629","metadata_source":"pith","pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","venue":"cs.CL","work_id":"407a2351-25f1-497d-b611-f77d0292a8e6","year":2022},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:0bb4f6018dd1e7728db44ff467c332ecef235f4fb69970468ffea39d56254966","observation_id":"2c0f21a1-1930-4fd4-9b1a-0def2ee9a9d7","resolution":{"observed_at":"2026-05-09T01:07:01.870928Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-12T03:19:36.897515+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T03:19:36.897515+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2511.20597","last_updated":"2026-08-12T00:08:22Z","snapshot_observed_at":"2026-08-15T02:09:07.725021Z","submitted_at":"2025-11-25T18:28:35Z","title":"BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents","version":2},"cited_work":{"arxiv_id":"2511.20597","doi":"10.48550/arxiv.2511.20597","metadata_source":"arxiv_reference","pith_arxiv_id":"2511.20597","snapshot_observed_at":"2026-08-13T01:24:45.972029Z","title":"Browsesafe: Understanding and preventing prompt injection within ai browser agents","venue":"ArXiv.org","work_id":"a0d67379-2d33-454a-adc9-f11a80f22f99","year":2025},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2511.20597","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:defb92a899a3a468f6bc6ce5111609c13207bd020ebbebecfad14989e1ce9b99","observation_id":"7b423caf-0233-4add-b9cb-150bac94caa5","resolution":{"observed_at":"2026-08-13T01:24:45.972029Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01614","last_updated":"2024-03-12T23:14:33Z","snapshot_observed_at":"2026-08-13T20:16:41.272728Z","submitted_at":"2024-01-03T08:33:09Z","title":"GPT-4V(ision) is a Generalist Web Agent, if Grounded","version":2},"cited_work":{"arxiv_id":"2401.01614","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.01614","snapshot_observed_at":"2026-07-08T16:15:06.143411Z","title":"GPT-4V(ision) is a Generalist Web Agent, if Grounded","venue":"cs.IR","work_id":"d3503fef-7f64-4dcc-8aca-1f16e997034f","year":2024},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2401.01614","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:57a1ee2c57bd78e7048ede8c06d0f898a6cf7baccd39c2c14c2bdc4968a12ab8","observation_id":"f6bd2ce4-c9ec-408d-879c-d2d03122361a","resolution":{"observed_at":"2026-05-15T19:40:14.169994Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.13854","last_updated":"2024-04-16T15:13:18Z","snapshot_observed_at":"2026-08-14T11:14:55.351653Z","submitted_at":"2023-07-25T22:59:32Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","version":4},"cited_work":{"arxiv_id":"2307.13854","doi":"10.48550/arxiv.2307.13854","metadata_source":"pith","pith_arxiv_id":"2307.13854","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","venue":"cs.AI","work_id":"7058ffd2-a339-4102-89eb-248eeb074652","year":2023},"citing_paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-08T16:08:51.850890Z"},"links":{"cited_paper":"/paper/2307.13854","citing_paper":"/paper/2605.05509"},"observation_digest":"sha256:463607d1ecd190569a367b7d89f45248f99af18dc2891eed49998edcdadd68f7","observation_id":"5743f397-6da5-4f4d-8ffb-bc1e0ac94423","resolution":{"observed_at":"2026-05-08T20:34:10.393465Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-20T18:52:18.85917+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-20T18:52:18.85917+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.05509","last_updated":"2026-05-06T23:19:38Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T21:27:11.076034Z","submitted_at":"2026-05-06T23:19:38Z","title":"WAAA! Web Adversaries Against Agentic Browsers"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":2,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":18,"verified_exact":14,"verified_fuzzy":22},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 1 inbound Pith citation observation for arXiv:2605.05509."}