{"as_of":"2026-08-18T01:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3b2a3ca617cc4ff761d5e5e4bf0f73c2ed02d7b9d5184ecc965b082fe1a4fd48","coverage":[{"denominator":14,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":14,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T04:05:04.871506Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:32:45.613431Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-15T15:32:46.489371Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"cited_work":{"arxiv_id":"2606.16821","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.16821","snapshot_observed_at":"2026-08-15T15:32:46.489371Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","venue":"cs.CL","work_id":"4b2c9b88-37a5-4c9b-aedf-aac7b73a5bef","year":2026},"citing_paper":{"arxiv_id":"2607.21951","last_updated":"2026-07-24T03:55:51Z","snapshot_observed_at":"2026-08-17T08:03:32.379877Z","submitted_at":"2026-07-24T03:55:51Z","title":"SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T15:32:45.613431Z"},"links":{"cited_paper":"/paper/2606.16821","citing_paper":"/paper/2607.21951"},"observation_digest":"sha256:3bd70e9c3c4d17ec657f251e44d831cf6e9e7de59c4d0b4693af45a6a8c29a91","observation_id":"776e12dc-fde0-428d-a8c3-c40ac4bd2839","resolution":{"observed_at":"2026-08-15T15:32:46.493324Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2606.16821/citation-record","integrity":"/paper/2606.16821/integrity","json":"/paper/2606.16821/citation-record.json","paper":"/paper/2606.16821"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"https: //huggingface.co/BAAI/bge-small- en-v1.5","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:26cbed26fdda6579a3e95337b6ad71f9bd446c61e5e2b69b46b9c05b6aac1b2d","observation_id":"ab52f143-877e-4d99-8b01-e0fa4fa9cae0","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec), pages 79–90","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:540d7d0a31153b154e0f82020a76bd03cf6c57f19a914cf486f71ca6739a84e5","observation_id":"0309018a-e146-454f-8dfb-da9cd8406c45","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"arXiv preprint","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:e1d18c1a3fa74621d302a1c540cbe99b7a4260efe387b11f156b263c90faf7f7","observation_id":"91cdea49-62e3-4f2c-952e-438ebc027b8e","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"alongside other op- tions","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:456eb662a98783787238be5f5bed61a53a2bf1a226c6a993e86148aa2d4fa0e4","observation_id":"cb61aca4-b6ca-422c-b661-69f8e3dfda1a","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:ce2a4ddc468684ee3b6e579e9716b7b43af9a656c078cc4959bc2fb115f46684","observation_id":"95866b0c-befe-4cbd-a56b-e395a500c5d8","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:51a92f431a0d9eaa24c8a4ab451abadc41a47fd5a4788121c3dd6295f80776c4","observation_id":"e36e8d51-9fc9-4934-aa0b-479f2d4a82e9","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:91f2f1778d9b41bd815f4b52b462c1119c7bff58c9a643f98289bce48c6d0101","observation_id":"45517157-3cbe-48ed-86e2-f9984271322d","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"shift_score","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:052524e7b1b5a47a0180b0c8405db0ade8ede0838657094daa545c5532101706","observation_id":"44bd56e7-881c-4852-a918-4dc086b0c7ba","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:3201e4dc9f7191a510505f8cf494b9a94766a28dcdb44c6d06b0ed313037ea3b","observation_id":"d45ee7d6-3f06-45ee-bf8d-d1a08dc1c892","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:4cfe8c963edf7b327d69b89634f58f67876a5eada617beda7ca4a0cae1f7f8e3","observation_id":"01512968-e8ee-479f-9a53-b2fd053e0443","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:8702a7f427f7a39c2a90541e52d56dbd6233f1adc703944f17a9cccce3e29f62","observation_id":"8feee606-7b8a-4fcb-bf03-19438b8aac19","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:82b39e2235779c1fb02548ae13d72f7988fcab9a0a55220a79725fba810a4951","observation_id":"d802720f-de5b-4994-a463-add959b7281f","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:60f086b0f6d29f12d3b886b8b7e64aaa385d89045424efabbd95effef9e13c79","observation_id":"84d333df-6a46-4fd3-a87c-991862d35e19","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T04:05:04.871506Z","title":"stealth_score","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T04:05:04.871506Z"},"links":{"citing_paper":"/paper/2606.16821"},"observation_digest":"sha256:ff9821e948c260e04840cc0dd864b6a642aad9d31362bfaed927bbee77d3c48e","observation_id":"9ebae84a-a063-49a6-8da5-d97b8fef3465","resolution":{"observed_at":"2026-06-27T04:05:04.871506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.16821","last_updated":"2026-06-23T11:59:57Z","latest_version":2,"primary_category":"cs.CL","snapshot_observed_at":"2026-08-17T22:31:31.154563Z","submitted_at":"2026-06-15T15:05:25Z","title":"How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation"},"reference_resolution":{"displayed":14,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":14},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 14 of 14 outbound references and 1 inbound Pith citation observation for arXiv:2606.16821."}