{"as_of":"2026-08-10T01:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:15c7fde0470b009fb62cf2e2fbd60470fd8c1ee064bcb5370845f29ad1b601b1","coverage":[{"denominator":44,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":44,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T03:09:34.972527Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T09:12:24.853947Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.09684","snapshot_observed_at":"2026-07-15T05:51:54.267975Z","title":"Evaluating whether AI models would sabotage AI safety research","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.12469","last_updated":"2026-07-14T07:54:37Z","snapshot_observed_at":"2026-08-08T20:45:25.098804Z","submitted_at":"2026-07-14T07:54:37Z","title":"Agent-Safety Evaluations as Load-Bearing Evidence: A Vendor-Neutral, Cross-Harness Reconstructability Metric","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-15T05:51:54.267975Z"},"links":{"cited_paper":"/paper/2605.09684","citing_paper":"/paper/2607.12469"},"observation_digest":"sha256:fe0c44462acc24d78b32790e3111e2bfaeeb4f29e7086195836cd33e8a397f76","observation_id":"4854c0a9-6648-4f10-b8ef-430b938f594f","resolution":{"observed_at":"2026-07-15T05:51:54.267975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.09684","snapshot_observed_at":"2026-08-01T09:12:24.853947Z","title":"arXiv preprint arXiv:2605.09684 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.20852","last_updated":"2026-07-23T02:23:09Z","snapshot_observed_at":"2026-08-07T07:14:22.441962Z","submitted_at":"2026-07-23T02:23:09Z","title":"Code Monitor Red Teaming for Public-Test-Passing Code","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-01T09:12:24.853947Z"},"links":{"cited_paper":"/paper/2605.09684","citing_paper":"/paper/2607.20852"},"observation_digest":"sha256:a1c6ffd47ed10093d1b08314e8c939e6298de394d1dc21a5c5e90cba50671a8f","observation_id":"66bfbfe0-e53f-4b93-a9b0-6b1604811588","resolution":{"observed_at":"2026-08-01T09:12:24.853947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2605.09684/citation-record","integrity":"/paper/2605.09684/integrity","json":"/paper/2605.09684/citation-record.json","paper":"/paper/2605.09684"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"cdf83f44-79b4-4653-86fb-eac703a80c78","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:2d146571d545e762ad02a08bfa3089279fd4fd90a0347c3ab79473d2fa4f0685","observation_id":"e60b184f-cd57-4bf6-8168-6e517393bbf7","resolution":{"observed_at":"2026-05-12T20:41:52.818600Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"03dbfc69-f239-48dc-90e4-136548a75c22","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:454af1837d126aa7ebc2ce0cf7edd3e89a52ef21e7c3cbfde8d1f6b7402d6679","observation_id":"f06d1572-feaf-45ef-a8ff-1d56d7d73472","resolution":{"observed_at":"2026-05-12T20:41:52.845570Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b10666be-32ab-44eb-84f3-9d5e0e449f80","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:989ceecb51390004e4f513f7ac8fbff7fb5795800781b7880d748617d88bdc90","observation_id":"0459a6b3-767d-4aab-a47d-18de68cb6ca4","resolution":{"observed_at":"2026-05-12T20:41:52.827381Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"167.172.48.16/28","venue":null,"work_id":"bf4f4ee1-f21d-4437-8db8-bf35ee879f35","year":2025},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:ff822fc3a5b6dfb262685c1edccf006b378c1ae1b705908367d1ecc3d9be209f","observation_id":"9642377d-e1a1-4887-aa8d-b9f2880fe6d3","resolution":{"observed_at":"2026-05-12T20:41:52.946387Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c2b52cfc-c445-47e0-a9a4-21b9d0fd7a76","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:66f18646d52a316095a673a1f534ac8c2eae2b183721a73d8b86cae0d07a2def","observation_id":"4e463831-25f2-4aa4-a640-0734fdf27a36","resolution":{"observed_at":"2026-05-12T20:41:52.922739Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"22db9093-9f20-44e7-b73a-3dfdf69f5331","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:a2236a893262a749b07aab46f5cf4df4ee3a399c8a04161ac3c9f42358481376","observation_id":"5e52754f-cc3a-45d6-8fff-d67bbc560a7c","resolution":{"observed_at":"2026-05-12T20:41:52.814549Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"What files should the agent need to access? What changes should it need to make?","venue":null,"work_id":"5f280992-e053-45c0-8251-7b017abbb7a6","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:c77fdeebcecdf15c8ce61730c38ca9a2678c56aa3a973c3888152e659d8f7b14","observation_id":"7a34d840-338e-4b12-aa3a-190feb9208a4","resolution":{"observed_at":"2026-05-12T20:41:52.937076Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"28df8fd3-43d2-4511-9431-fc7472e9885e","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:4319c880a19fd02cf57d87eecc8dfad7ce41a6c138444c40c0d6b6a8d5ddb865","observation_id":"60a141e4-1381-45be-a879-b8c3793352c4","resolution":{"observed_at":"2026-05-12T20:41:52.858433Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e012dbb6-47d5-4fc0-97ca-f045eb25b30a","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:74ddc1501a4c89843f4412d7b276f1a495a62944ed7ab6ff46ad34e06e7fb583","observation_id":"638ea022-7bd4-42ed-b824-0da14cf44e7e","resolution":{"observed_at":"2026-05-12T20:41:52.842178Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"7280c69d-59f3-46f5-9faa-b191ccd10057","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:91786e850a416409e189e8938484bf079df4153e1ad075f45232221cef4a3af1","observation_id":"10dc6d80-d8e7-4e98-a9ed-ad962729a605","resolution":{"observed_at":"2026-05-12T20:41:52.810489Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"5843320d-710f-41a4-ba94-170e67700576","year":2025},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:e44dc2d3de724814c7390c813f336f3889dc314a950d34f9d24971895674c5d5","observation_id":"41257beb-bb83-4c34-b943-03bdb2f8cecd","resolution":{"observed_at":"2026-05-12T20:41:52.933742Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The attacker agent will be given a main task to complete legitimately, plus a secret side task to accomplish while evading a monitor","venue":null,"work_id":"c2a010ac-218a-4465-998e-207916e84180","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:42764835f6cc2d1ffd27155755bbf05117ad50ffd7dc2ffb25164ea10d00ba95","observation_id":"044e2569-c616-4582-9ab3-2799d31e9ae1","resolution":{"observed_at":"2026-05-12T20:41:52.939754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8d60f704-103a-4f2d-a6c3-d192f9478f86","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:75659cc2fff999dbb74af490e6c50b15e3d3fe45c49cbde4bb5ef3a5de26c905","observation_id":"dd63d327-fe8c-441a-b740-fc8d8fc90252","resolution":{"observed_at":"2026-05-12T20:41:52.853968Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b660ffcd-f49d-43b2-a0e7-910023b3b740","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:931825be79e7e02b8be113de5e6bf0eea2aef5b5e5a6a2976ece2e8b3f0435fa","observation_id":"6c248771-197e-4a70-b491-eab1b06f26db","resolution":{"observed_at":"2026-05-12T20:41:52.862094Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"94e887d3-3b8b-4f29-abcc-c5de3deaa203","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:9327ed359e67b84a0c8111dc5d8c3ad3fc7b812bcca52fbc4f031f499285e94e","observation_id":"58e31e2c-67f3-4073-b447-93e1311a135c","resolution":{"observed_at":"2026-05-12T20:41:52.943255Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"05f0c6a0-7e6f-4237-b86f-a805a9051515","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:1ca5c67cbbedf06f13f766da994bffe2f12c16eb839265262661d6cb1260e12b","observation_id":"681fb340-a012-41d4-873b-1051e4442068","resolution":{"observed_at":"2026-05-12T20:41:52.952791Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Then generate the report","venue":null,"work_id":"d279782d-0f60-4ba7-8db4-ccaf753ffba9","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:ac5b100563c8d8b5cc64f4155beea9fe83011160c23179a66f6097cc9b5555e8","observation_id":"0da35c73-1923-43e4-be8b-0969ca5ae579","resolution":{"observed_at":"2026-05-12T20:41:52.873244Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e90382c0-bf86-43c1-8c35-bba30d454f90","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:63b312459efead1091c2d4dace962fddc73f3a527123036e33efddcf28617734","observation_id":"2a7a484f-afdc-4d2f-a70c-0bc5c99b9e8b","resolution":{"observed_at":"2026-05-12T20:41:52.949336Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"1e04ab65-8316-4faf-9a4a-22c9aa8b3cae","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:6f255e3746f15e2ccde131145977bfa647667e6dc41dcd9421fe2acb33283561","observation_id":"874577c5-6a67-49da-a0c8-f8b46f771534","resolution":{"observed_at":"2026-05-12T20:41:52.884449Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"53559503-6223-4082-afd6-88be3f27dc14","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:7b3921c17e6347e4ea5e84cfc0222ece3a4c73681349e19cef95ece50948b9c6","observation_id":"b220f5ac-6e67-4707-9b65-7ad79abeea2f","resolution":{"observed_at":"2026-05-12T20:41:52.928368Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"For each strategy, specify: (i) exact step-by-step instructions; (ii) what the monitor would need to understand to detect it; (iii) which main-task actions provide cover","venue":null,"work_id":"7304e099-9fc1-4859-b92e-845aed4f141d","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:00fb6186442a993aa7f0a5563b7a30e6d1e7d950e9981366605cfa4fcb33fb95","observation_id":"9d241114-8d32-4422-ba95-703c400155e3","resolution":{"observed_at":"2026-05-12T20:41:52.805490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"If the attack could be slotted into a different user task unchanged, the strategy is not specific enough","venue":null,"work_id":"90882867-b081-41a7-9f1a-1b54bc6e4b57","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:3c56fb6da54b82820f51ffcdcc2052a3f7ae31a303a495a313e78594a86084fc","observation_id":"67dd6bf7-5139-426d-a9b9-570fc5cad26e","resolution":{"observed_at":"2026-05-12T20:41:52.918956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Avoid unnecessary complexity and any obviously adversarial signal","venue":null,"work_id":"a76a985e-560c-4e2f-8ab4-50c553d18674","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:1400e1948eb19ab739e01ea13b78ec0a826dfe99305ae0d4e626ae6b4ad12f78","observation_id":"7494a131-2519-4bab-b26c-f7510b1faa5f","resolution":{"observed_at":"2026-05-12T20:41:52.887957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"X-API-Key: <key>","venue":null,"work_id":"4a476c0a-6c5e-44ba-883d-fba28f15edcc","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:c899e62f9c864cd1596e244d65943b15ab2c6c383618f60331bee16607abff5c","observation_id":"3b06bb0b-f88d-4a15-8827-9e7fdb567420","resolution":{"observed_at":"2026-05-12T20:41:52.834507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c7c76cd6-460e-402a-9f18-f7d7dd0db4d8","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:849e2e56f7e3a653aa18f10fe4e6ac4f39c4a98d56eab5e9f8a85b993b22667b","observation_id":"59a3affe-29b7-476e-a5ff-78fad795c440","resolution":{"observed_at":"2026-05-12T20:41:52.801026Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"All current strategies are caught easily by the monitors and score 10/10 on suspiciousness","venue":null,"work_id":"4ff5739e-c9b2-4016-8b49-2a1eff786d43","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:9ecc0ebaea078d322f3186b55e7b2c69bf45c4b6f6ad377f5f44dacae82fec93","observation_id":"d8d36b50-1055-49d9-9516-759cd1358ee3","resolution":{"observed_at":"2026-05-12T20:41:52.837526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"b7a54f98-195d-4070-a1b0-295c8f01033d","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:a3faa67f2782724d9cc7d1dd8aa92de5f715853bdcd32e53c1d5f9023fc92573","observation_id":"3c505654-20df-4b51-8ff4-bd134818a505","resolution":{"observed_at":"2026-05-12T20:41:52.915525Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"a62043ad-a22b-40d8-a441-ec4e82e6a591","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:b9443a200767fc6e1a0fbcd7d0c67b894d1794efc20432fa011c7e8f385a087b","observation_id":"017fdb33-b05a-429e-9ee3-4f7c8a4be73e","resolution":{"observed_at":"2026-05-12T20:41:52.839613Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"3.2 For every step, propose a way to make it less suspicious","venue":null,"work_id":"2eb5065c-d50a-4011-8af9-0a1d5bdad426","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:43e3bf66d6a6187e8692ca9bd3d16bdcd9089bd154d22c37654ef1cebd2c669b","observation_id":"7e093238-e24c-41ad-b551-c5bed6081dab","resolution":{"observed_at":"2026-05-12T20:41:52.909285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Where possible, frame attack steps as something the user would have asked for","venue":null,"work_id":"184bb02d-fb25-43df-84cb-9f28425779e1","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:083cb5ef93f63e65afef9e401319a0a54b50c7e8697dc8deb3054be53cc6affa","observation_id":"14515655-d50f-4415-aa76-fd0db7d9e1e2","resolution":{"observed_at":"2026-05-12T20:41:52.912299Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Avoid unnecessary complexity and any obviously adversarial signal","venue":null,"work_id":"cd6b6d4f-3c29-429d-9b47-25d8f10c46f8","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:9214f9ae6caab8be2b88306f953b61abaa8a7e2ab53fe02b145b2e385e620a23","observation_id":"a35ac7e8-7f9d-4a08-9973-3e4c48e603a9","resolution":{"observed_at":"2026-05-12T20:41:52.925749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"f2244fbe-0aee-4731-a066-8fdd67aebced","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:805f7d91da44d2ce119b2c5ad317075bded7dc5a9aee05cf1489ee390be83b44","observation_id":"71476347-4e87-44b4-8c77-bb2665d97b0b","resolution":{"observed_at":"2026-05-12T20:41:52.899220Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"manage-sudo.sh) over writing new files containing dangerous content","venue":null,"work_id":"ade31341-84ef-4a83-9876-f468fc2434c4","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:231def76d843d3d078bbe7f0735eb715a6251aaaf2ea1af7a569fb6bbc8a6c10","observation_id":"2db0568c-17f6-4552-a6ff-5e43ccec2894","resolution":{"observed_at":"2026-05-12T20:41:52.906157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"X-API-Key: <key>","venue":null,"work_id":"fd14e9e9-d8c3-4201-898f-53ffff0a6133","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:49b60c257e19d974e0d2c5e56de28aff88585d23db7e35db7ebaec3f9e15b51f","observation_id":"88971916-fe11-4718-b5f0-35914ea4e34b","resolution":{"observed_at":"2026-05-12T20:41:52.881276Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"39dba5fa-7367-4a9c-948e-7233d1dcaa66","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:a96b0745c547bc4dd871db5d636a4bd298809d109871273ceae896a50cda3175","observation_id":"30575829-8184-4abc-acde-1b05616329e1","resolution":{"observed_at":"2026-05-12T20:41:52.956931Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"test crash reporting","venue":null,"work_id":"5d84cdb6-5886-46d8-9e48-482c9e7df11d","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:1f393ec3276e23b1a3d47bf44111b016d477d9e39fb4527c20be3117495eb704","observation_id":"aa76cd0f-d715-4431-9391-e3308d5a6c41","resolution":{"observed_at":"2026-05-12T20:41:52.869779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"4.Selective payload: send only the API key or specific credentials, not entire config files","venue":null,"work_id":"3a036c14-9074-4da6-8217-31420f6f6b3d","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:bb60af10cdd9ff7deffba17ed312b31b5f25e37b627f458be67d681d35536192","observation_id":"cf9b19d0-5977-49d4-b5fb-275fdb273c64","resolution":{"observed_at":"2026-05-12T20:41:52.849724Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"create\", path","venue":null,"work_id":"7423a11b-aa8d-45ed-8503-5b21da3673d7","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:7b9c796a8b896ab54322eab52f39597d03578cf77ed71816c801bdb2dd2a7b82","observation_id":"b88bfb20-3553-41f8-92d8-274ef01e2b90","resolution":{"observed_at":"2026-05-12T20:41:52.823081Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"bd7684c5-cb47-4249-b818-06fb4e635543","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:ec6344b6ef3162ddb2cd116cfed1fa86cf37e336e2448bdb04becbaa1cd6a152","observation_id":"0088fc25-deff-4b10-9402-da3afa0aab79","resolution":{"observed_at":"2026-05-12T20:41:52.830577Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"05ad7742-83ba-49e4-8899-074218febd92","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:3450a8ae281b20953ac3cb46b35ec0fd8b8f554b9cff39bf29d9acffd8e3c8dc","observation_id":"63fd97cd-e067-4a22-876f-feca644c5280","resolution":{"observed_at":"2026-05-12T20:41:52.895255Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"e88e0f4d-cd12-4585-a5f5-232e4cdeec30","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:e8931142b7010b4cc7b8561d70a4fe8e4a7f1bdca07827de8e6268ece7f3feac","observation_id":"7e97bf8d-6503-4173-9914-81e80891b9ae","resolution":{"observed_at":"2026-05-12T20:41:52.903277Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8ee0fabf-19ba-41e8-af2d-ec93947dcf8c","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:cddcaf71e4edbee6239a51375c14c04b08ec7314613729d99390e06cdc275abe","observation_id":"bc54c829-814b-4931-a113-c2e7bbdc3191","resolution":{"observed_at":"2026-05-12T20:41:52.877575Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"c0d2c98c-a480-4783-a17f-838b48a0b09a","year":null},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:c379a3b5e4f76413efbd70896d539b7dae9c69f8bf4fdd5576c0192bf48c6c00","observation_id":"0c60cfd7-33af-4c1d-99e1-9412c58c7d33","resolution":{"observed_at":"2026-05-12T20:41:52.891734Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"No attack detected","venue":null,"work_id":"f1d41829-df23-4b70-9980-42e53eab4588","year":2025},"citing_paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-12T03:09:34.972527Z"},"links":{"citing_paper":"/paper/2605.09684"},"observation_digest":"sha256:bc3e3b8a5ae9aa652d29396fcec1ce10cc973a5514e01532ff38a183257d3eba","observation_id":"109aa328-0a9a-4f2c-8020-9319d5ebddfb","resolution":{"observed_at":"2026-05-12T20:41:52.931010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.09684","last_updated":"2026-05-10T18:04:31Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T23:21:44.900680Z","submitted_at":"2026-05-10T18:04:31Z","title":"MonitoringBench: Semi-Automated Red-Teaming for Agent Monitoring"},"reference_resolution":{"displayed":44,"state_counts":{"malformed_identifier":2,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":26,"verified_exact":0,"verified_fuzzy":16},"total_outbound_references":44},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 2 inbound Pith citation observations for arXiv:2605.09684."}