{"as_of":"2026-08-10T03:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:22297b9869660ad64981d49c4121d43535790fcbba32bc8fad5cc8eb986d2b17","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-08T00:18:55.016013Z","state":"measured"},{"denominator":60,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":60,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.05189/citation-record","integrity":"/paper/2607.05189/integrity","json":"/paper/2607.05189/citation-record.json","paper":"/paper/2607.05189"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.578548Z","title":"OpenClaw: Open-source personal AI agent frame- work","venue":null,"work_id":"a43ad229-266b-4c4d-a322-2993813092d3","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:86c424c66d4935828ed170c9894d2d1560be04e5d2299c9f340aef64b6af69aa","observation_id":"a3054842-2a02-411b-9cf5-2b674b4e8794","resolution":{"observed_at":"2026-07-08T00:24:22.579677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.613806Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents,","venue":null,"work_id":"4e2c5c45-19c6-482e-b571-68e5c2f5790f","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:efcfe5881f0d9c63cfb7cb9bc7ff442505186eb546fb1dc328b03beaa8d71e45","observation_id":"b0c93af4-2ef6-4b72-b1bb-1946fa67324b","resolution":{"observed_at":"2026-07-08T00:24:22.615404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.610018Z","title":"Formalizing and bench- marking prompt injection attacks and defenses,","venue":null,"work_id":"78408fdd-bd4e-4ffe-815b-db7a3ac32ab5","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:b7778f84c067e587035adfe2f7e60dd89c6b562602f7e78b6191b7e5c87ee825","observation_id":"ef02c7bd-4764-445e-acf7-309b968aecd3","resolution":{"observed_at":"2026-07-08T00:24:22.611682Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.593198Z","title":"Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":"68303012-3edd-454a-8c3b-bd06362b4e21","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:858b523b81931f7971982ec8a146eb8a624e9d6d06e719151cc3b6180060ba86","observation_id":"f29c755e-a207-45bf-88fd-6bac5d5aa8cd","resolution":{"observed_at":"2026-07-08T00:24:22.594455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.587698Z","title":"{PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large lan- guage models,","venue":null,"work_id":"7d370062-d92e-4117-9da9-e0ca7f55e6cf","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8f331fd40e605568254733610d50e4e6825937c2165df0f6699d13fbcfaf215b","observation_id":"6d453410-5180-409a-9376-d5b89e6d5098","resolution":{"observed_at":"2026-07-08T00:24:22.588991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-02T07:32:11.339534Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":"2504.19413","doi":"10.48550/arxiv.2504.19413","metadata_source":"pith","pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","venue":"cs.CL","work_id":"a5aed26c-a248-48b6-a59e-f7693fcb180a","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:b4188f0eb2f81b86e8c8398a0f09f2b40f3470534f453a5cd99b460016cacda8","observation_id":"48cdb1a5-b19f-4554-b4ff-8ec30c2bbe46","resolution":{"observed_at":"2026-07-08T00:24:22.456135Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.554049Z","title":"Zep: A temporal knowledge graph architecture for agent memory,","venue":null,"work_id":"e351d15d-c0df-4190-b8e8-a8100b98953c","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:0590e1e7b3aa959a60515990118320b19527c6635c8a103dc11b52a0da0421d2","observation_id":"1dbf73bd-0b52-4b4b-8d31-d8a46fd9e129","resolution":{"observed_at":"2026-07-08T00:24:22.555289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.611894Z","title":"Hermes agent: The agent that grows with you","venue":null,"work_id":"6ee33ade-2396-459d-b6ce-ab70daec640e","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:06be0f7d9faf5862f8d75580d5dab9f248404a02fffc0cfc8416603143427262","observation_id":"d46ebe29-406f-4344-9a24-c062ecdd8d55","resolution":{"observed_at":"2026-07-08T00:24:22.613543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.580201Z","title":"Bug: System greeting prompt and thinking blocks leaked to user chat interface","venue":null,"work_id":"08dc9a8b-d9ad-412a-ae6f-c275663db78f","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:7cfde89b38b64a2f394cdcb0067fbcc90558f821586581c389a1497271f72fbb","observation_id":"b80c7a36-85e4-436b-a867-116782c1c006","resolution":{"observed_at":"2026-07-08T00:24:22.581466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.635734Z","title":"Bug: Internal thoughts visible in web UI (Chrome, Open- Claw 2026.2.26)","venue":null,"work_id":"583eac54-0bc6-47e0-8293-9fba0786c3da","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:a605424f27ec683e376a9dd4d2bbb085bfc2a7f5d11881fce3b2803ce558924b","observation_id":"cc119d62-f12c-4b72-b407-55e67bb7e457","resolution":{"observed_at":"2026-07-08T00:24:22.637311Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.628338Z","title":"Hermes-3 8B tool-call template leaks tool calls into content as text under realistic agent shape (Ollama)","venue":null,"work_id":"7769df82-34e9-4335-9bee-049ffcff2599","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:b02c7b7706e81fa03b3df226bd03518024a344e3f6dd3d776936104ede15bc9c","observation_id":"5dcbee75-817a-4ba9-bd40-f78e2106ab5d","resolution":{"observed_at":"2026-07-08T00:24:22.630001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.607894Z","title":"InjecAgent: Benchmark- ing indirect prompt injections in tool-integrated large language model agents,","venue":null,"work_id":"4d2ff8dd-0fb8-4ed6-b843-f5d302091b89","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:9cd9729ed4257fc55c326147d3f61acbfb5585c504447a736d91714e73bcee85","observation_id":"44aa9991-fb1b-45b7-a629-036f206cef5b","resolution":{"observed_at":"2026-07-08T00:24:22.609576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.566004Z","title":"Agent security bench (ASB): Formalizing and bench- marking attacks and defenses in LLM-based agents,","venue":null,"work_id":"893bbd66-cf82-433c-b4d3-db82bb439568","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:6f9bed42b159d9e85e8f3994a19fef9f734a2c819a11821aa261e75032007faf","observation_id":"34745320-ac80-4aa6-89db-8bc1c4fb391a","resolution":{"observed_at":"2026-07-08T00:24:22.567518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":"2412.14470","doi":"10.48550/arxiv.2412.14470","metadata_source":"pith","pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","venue":"cs.CL","work_id":"96afb8b9-0e7e-442c-93b1-6638599fc041","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:9148373a48a367282e17f458acc28a5496cabeabfff697e4c192439be98701dd","observation_id":"6d205a78-05b9-41ea-bc70-954e75aee862","resolution":{"observed_at":"2026-07-08T00:24:22.452635Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-14T18:20:24.185748+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T18:20:24.185748+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.633896Z","title":"R-judge: Benchmarking safety risk awareness for LLM agents,","venue":null,"work_id":"306f31cb-851d-4c91-97f4-493ca59af28e","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:05f9b6a0f8b646745734d679dedb082b8f69dcbd9cf37e1473a85606dcace5c8","observation_id":"81c0fc25-6ce2-4531-bba0-85feecfda819","resolution":{"observed_at":"2026-07-08T00:24:22.635525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.605891Z","title":"Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Pro- file,","venue":null,"work_id":"84717c5c-18b4-41ea-871e-6347ab9da0de","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8d4cf30eb97369439b4d246093acf56af617e079862c9aec395e188dce52a586","observation_id":"0a11eb64-4f65-40a2-80d9-323827befac2","resolution":{"observed_at":"2026-07-08T00:24:22.607686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.620527Z","title":"Rubrics as rewards: Reinforcement learning beyond verifiable do- mains,","venue":null,"work_id":"93f2f1e5-a0cc-42bb-8833-66ed0e4615c7","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:eca88870ee936dcdb0070d4ed62f21867ecad35eef8b0988368fb1db23bc4d9c","observation_id":"1055920d-c960-4172-817e-71a4eefa5bea","resolution":{"observed_at":"2026-07-08T00:24:22.622197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.618682Z","title":"Deepseekmath: Pushing the limits of mathematical reasoning in open language models,","venue":null,"work_id":"8ee8b3fd-b770-4aea-9268-fab5ae47b466","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:4ddc628ea74bd40874e77247f280ccae20f574256adb6c329d5d99c5a4e30c80","observation_id":"0f9db5da-b576-426c-b48e-a1f02f8cd333","resolution":{"observed_at":"2026-07-08T00:24:22.620277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.616591Z","title":"Securing llm systems against prompt injection","venue":null,"work_id":"7e42a01d-022c-4227-b97d-6025d1ca04c3","year":2023},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:59fc054ce914ea9a36a310e2f549430b470fc08dd9a1bcef3019a8b28624b3a3","observation_id":"c6064923-038a-4282-8ae2-a0610f6e092d","resolution":{"observed_at":"2026-07-08T00:24:22.618439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.603543Z","title":"Prompt injection attacks against gpt-3","venue":null,"work_id":"4b3b88f1-ab6f-4947-bba3-f4f85888cbfa","year":2022},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:2fac0728b96d5a24426890448522ecce8b2ebc12bf9663c7637f07737931cfe2","observation_id":"3b917e0c-a0a1-4fe2-82ec-1580eebebca4","resolution":{"observed_at":"2026-07-08T00:24:22.605058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02128","last_updated":"2022-09-05T20:29:17Z","snapshot_observed_at":"2026-08-09T15:15:59.049198Z","submitted_at":"2022-09-05T20:29:17Z","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","version":1},"cited_work":{"arxiv_id":"2209.02128","doi":"10.48550/arxiv.2209.02128","metadata_source":"pith","pith_arxiv_id":"2209.02128","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Branch, Jonathan Rodriguez Cefalu, Jeremy McHugh, Leyla Hujer, Aditya Bahl, Daniel del Castillo Iglesias, Ron Heichman, and Ramesh Darwishi","venue":"cs.CL","work_id":"217a3646-c7b7-45c8-9527-b642d3952d7c","year":2022},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2209.02128","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:4e965efd0ccb2952ac59ecad5b6b6fef4da039abfcdc5ca169d2aeb5b687b9af","observation_id":"2f0d4c74-f8ba-4420-9d4d-45d24f478537","resolution":{"observed_at":"2026-07-08T00:24:22.468806Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":"2211.09527","doi":"10.48550/arxiv.2211.09527","metadata_source":"pith","pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","venue":"cs.CL","work_id":"a7c5b6ec-3407-4330-96c8-3fc58e7d410b","year":2022},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:56c4620ee307390c7486588d47588a3439374d3674dff351addb93a966743b13","observation_id":"46db4377-b5c5-40ee-a72f-b9edd8b81895","resolution":{"observed_at":"2026-07-08T00:24:22.462080Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-24T11:53:03.018758+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.622458Z","title":"Delimiters won’t save you from prompt injection","venue":null,"work_id":"e318fb77-94a6-4261-80e3-564c0457b2a2","year":2023},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:e60e604a49f30146fcc9ec1f2042a0d2c72c9b39b8a714fe1923790bda6d931d","observation_id":"f0ead309-bef3-4b21-9872-fc315f6fbcec","resolution":{"observed_at":"2026-07-08T00:24:22.624132Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.564079Z","title":"The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections,","venue":null,"work_id":"b01b5c56-19d0-4a8e-ba0c-bdf261f3a89a","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:56c339d914e80913650df54022bcda42bba355c1acf215166fde8ae7300c9fed","observation_id":"596ca047-6af5-42c9-8568-fadafe95891c","resolution":{"observed_at":"2026-07-08T00:24:22.565410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.576552Z","title":"Thinking content leaks into text for MiniMax/Kimi — need per-model thinking control","venue":null,"work_id":"658e9b02-1ba5-4b75-8dd7-00544b2c0ec7","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:a911d8b0d15f1f9b521a7bf09599e4298834ce04288d3f77cddead54c90a8e41","observation_id":"535f49f8-dde5-42ca-ba68-8ab4db4f966a","resolution":{"observed_at":"2026-07-08T00:24:22.577981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.559854Z","title":"Datasentinel: A game- theoretic detection of prompt injection attacks,","venue":null,"work_id":"f31fd56b-42d5-4e8a-ac25-3e258bfc349d","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:dddc507cccbdb007733810aea5c557ad5de7524839e1cfb9e2658ea611edec55","observation_id":"53e64337-05f7-4fdc-941d-091221a52786","resolution":{"observed_at":"2026-07-08T00:24:22.561393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2507.02735","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T08:16:58.857965Z","title":"Meta secalign: A secure foundation llm against prompt injection attacks","venue":null,"work_id":"69776aad-e4d1-4d24-bb01-59055547fa49","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8d044b8cc3b3eaf4aa3c6c51637c6290504f7388d8a31b4810a781f9ee03034a","observation_id":"2e8b9270-331b-47b1-881c-55de3eeca208","resolution":{"observed_at":"2026-07-08T00:24:22.441236Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.596015Z","title":"Agentdog: A diagnostic guardrail framework for ai agent safety and security,","venue":null,"work_id":"a27b0c2c-405c-45fe-bd78-c553380eb6bb","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:19f1cd30e138ea4f1a292c774d087224ec0476c6d5dac4c8fc4e5e13b33a31c8","observation_id":"5a000630-fcad-4135-a713-c202e9403c88","resolution":{"observed_at":"2026-07-08T00:24:22.597481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.08412","doi":"10.48550/arxiv.2602.08412","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"From assistant to double agent: Formalizing and benchmarking attacks on OpenClaw for personalized local AI agent","venue":"Open MIND","work_id":"c1f5d74f-3091-4e88-9f5b-577d17e1124e","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:335f185e2cbc2333cda6b3077d5486878fe1836a91fbd4159432d9bb32244fb5","observation_id":"85d24812-c5f4-424b-b30e-d3f375b00d01","resolution":{"observed_at":"2026-07-08T00:24:22.437969Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.14364","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.442445Z","title":"arXiv preprint arXiv:2602.14364 , year =","venue":null,"work_id":"e9b445b2-bc82-4843-aed7-9d752166c09a","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:bcb19dcce7a25bc7747505fca483190f110abda468f1b4a473ef41713dcf89d6","observation_id":"3d41f335-f9e0-4954-8317-0d15631beaa4","resolution":{"observed_at":"2026-07-08T00:24:22.444219Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.594945Z","title":"Don’t let the claw grip your hand: A security analysis and defense framework for openclaw,","venue":null,"work_id":"1b28f40c-e8e7-4315-993f-dfa49818d022","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:1be665b9437b155311f229e3dbfc6abec167e2243bb2392e6dcfccf0c54c55c5","observation_id":"1b44cf50-2e9d-455a-b7d1-d2a87e88799f","resolution":{"observed_at":"2026-07-08T00:24:22.596178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.00902","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.463247Z","title":"Clawdrain: Exploiting tool-calling chains for stealthy token exhaustion in OpenClaw agents","venue":null,"work_id":"bb53ab22-50b2-4b48-bc17-424d8889e710","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:9d984c257bbe00569a59c3623b0a4c0b29d0a52420e4fd8965a4ae07e461867f","observation_id":"6f775051-a681-43c0-9a90-2b849a0dbf6e","resolution":{"observed_at":"2026-07-08T00:24:22.465909Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.583887Z","title":"Taming openclaw: Security analysis and mitigation of autonomous llm agent threats,","venue":null,"work_id":"b0bf31fd-6e3c-4bb9-b627-a8be7142843f","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:debe4afa607f5f1644bc228fe7062ddd219abe8c72397abe9988154893d69ca5","observation_id":"5069d1f7-a859-476e-8c8b-3abb908637f6","resolution":{"observed_at":"2026-07-08T00:24:22.585374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.639668Z","title":"Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,","venue":null,"work_id":"1fef6af4-16f9-4dd2-90ab-5fb812701087","year":2023},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:d59901cfb87a207fbc580859b9659807421340018561532fd8c02316d5435b4a","observation_id":"3ce80ce9-c79b-481f-b0de-6b36bb6ea509","resolution":{"observed_at":"2026-07-08T00:24:22.641230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.555867Z","title":"Memory injection attacks on LLM agents via query-only interaction,","venue":null,"work_id":"31d60fda-c183-4897-8180-221f106987ae","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:834cd7628dd96e7aa86668092efc50b78cce0a7309665447dd0dfc772fdd6292","observation_id":"9745d96d-3f00-489a-be72-eca7cf4b6ae7","resolution":{"observed_at":"2026-07-08T00:24:22.557135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.574411Z","title":"Memory poisoning attack and defense on memory based llm-agents,","venue":null,"work_id":"77b66d81-8df5-41be-bd41-ce44dd9fe0c5","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:ffe311530f3dc36658e8550c13c7e0880eff5924d97d1f8a827254c9950b512c","observation_id":"2d7ab257-7e05-44d9-8766-5d14896846d7","resolution":{"observed_at":"2026-07-08T00:24:22.575739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.582110Z","title":"Agentlab: Benchmarking llm agents against long-horizon attacks,","venue":null,"work_id":"7f0b4573-f227-4f11-b7db-3f5d894c0341","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:6074042c991872adfc7a01216dde5d2904efc1a7363412ed342242084d62105c","observation_id":"ae4c7f9b-aac7-4398-a2cb-b0012550eb6c","resolution":{"observed_at":"2026-07-08T00:24:22.583363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.538689Z","title":"Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,","venue":null,"work_id":"36a787b5-a664-4a68-92db-79d2930e9326","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:c3a695c54dd5bcc7bd3878ff3ecc2bcecb752200bfb32ee4a3d9a55aa4831a69","observation_id":"3362f025-1935-4388-83ea-1a8fd1f257d3","resolution":{"observed_at":"2026-07-08T00:24:22.540641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.16962","doi":"10.48550/arxiv.2512.16962","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2512.16962 , year=","venue":"arXiv (Cornell University)","work_id":"90120582-e1b6-45f2-af30-e61c82587d05","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:cdfe56ceec0b9132cba605c38a52a69f7c219f07fd8a7cb9c832fdb858daa22f","observation_id":"f02a4b00-da82-42f5-98d8-9581983985a3","resolution":{"observed_at":"2026-07-08T00:24:22.449187Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.17318","last_updated":"2025-06-18T14:29:02Z","snapshot_observed_at":"2026-08-06T23:52:05.545407Z","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","version":1},"cited_work":{"arxiv_id":"2506.17318","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.17318","snapshot_observed_at":"2026-07-08T00:24:22.457387Z","title":"Context manipulation attacks: Web agents are susceptible to corrupted memory","venue":"cs.CR","work_id":"0f1acc61-0568-43cd-86ca-2c44121f700e","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"cited_paper":"/paper/2506.17318","citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:c367ce2cd583b1967e315f20aa386c3f5fe2c30fed208aad4667a07ba7771e71","observation_id":"235bf3eb-2b0a-4441-a2dc-a1f1b23270b8","resolution":{"observed_at":"2026-07-08T00:24:22.459420Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.562033Z","title":"Gmail API Overview","venue":null,"work_id":"22feb18c-1a4e-4ea5-af1d-dc359dceb8d1","year":2025},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:79f67fb08ab332eaa0f8889af352d02283261f82656821448d66f25448829edc","observation_id":"95e224f4-cb69-43dc-8594-711c66286d11","resolution":{"observed_at":"2026-07-08T00:24:22.563371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.601767Z","title":"Use the Microsoft Graph API","venue":null,"work_id":"ea8343f4-f99e-4d42-9598-f15d18a735ef","year":2024},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:9f16c56ed06aa89339950cb4aacc43444c7cc1934c5ad0661389281a1447511b","observation_id":"45d66257-5911-45e0-8e9f-b511ec8631cd","resolution":{"observed_at":"2026-07-08T00:24:22.603346Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.543772Z","title":"Decodingtrust-agent platform (dtap): A controllable and interactive red-teaming platform for ai agents,","venue":null,"work_id":"06e00aa6-0e7d-492d-92a1-457d232c2217","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8661b43a6887c653b440af74037ef0002b0f04790cc939d4b2a21c062fa30e67","observation_id":"3c9af81a-f596-4149-8afe-355b8d9d0436","resolution":{"observed_at":"2026-07-08T00:24:22.548155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.551915Z","title":"On cost-effective llm-as-a-judge improvement techniques,","venue":null,"work_id":"e41b05e4-a84c-4581-896c-4b31fa254074","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:851cf95c87b278aba36c51a77b2f48b7e08ed07ca2fa9d8d958efdd15e4c7287","observation_id":"e1b0cc03-f068-40a7-bc37-acb10c76a81b","resolution":{"observed_at":"2026-07-08T00:24:22.553369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.630227Z","title":"Hermes agent documentation: Memory providers","venue":null,"work_id":"05d86959-b65b-4ead-ad86-242f98747234","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:ecb698f112940df53eb5ccfc0c3b345a33d742ce5fdf6566f56f775a3c058e18","observation_id":"9b3dabe1-11b0-4243-b79c-737d853de8cc","resolution":{"observed_at":"2026-07-08T00:24:22.631783Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.637721Z","title":"NanoClaw: A lightweight alternative to OpenClaw with container isolation","venue":null,"work_id":"9dc30e0d-1c49-4a00-9764-80c84afbd076","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:6b9b9fba0185718cd1a6793deca2da272bf3de877fd91575bcabae16fb4b0826","observation_id":"cdde1a45-e212-40eb-a0ee-62355204ab9b","resolution":{"observed_at":"2026-07-08T00:24:22.639447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.586046Z","title":"Automation Templates: The Silent Pattern","venue":null,"work_id":"62b25e7d-a8fb-4b1c-9b74-5da0b3344783","year":2026},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:bb472743160e954c51478051e50484a088a70207bf933ec3952e439a2b1b6b22","observation_id":"379e5185-d606-4a75-83ee-48fb0553292b","resolution":{"observed_at":"2026-07-08T00:24:22.587150Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.541407Z","title":null,"venue":null,"work_id":"96cf45ec-fe76-4d72-ac86-666d5db4275c","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:b7b088ab3053231248757bab34cb7f54fc1423873890f775d4f8b1b54afdc992","observation_id":"621cb83a-8d83-411b-bc0f-0fbdc8c237ec","resolution":{"observed_at":"2026-07-08T00:24:22.543101Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.548771Z","title":null,"venue":null,"work_id":"0a927e05-0d83-4c97-96a4-77c96e1bcb8a","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:941d4dfb380f86a1362cab8ae05d31628300bb527ec092f9cffda7f8b9b07da2","observation_id":"67524c10-ba11-4bbb-a498-5a85d85d83ba","resolution":{"observed_at":"2026-07-08T00:24:22.551216Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.570442Z","title":null,"venue":null,"work_id":"9140d6cd-7eb8-40f9-9dd6-b26f43caa819","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8ab3a269da529585ccb6f2d4dd219ff52916f576edb2535a5a15735dd65b6ac9","observation_id":"cef21a73-69e1-4a35-add7-be0550b0fec4","resolution":{"observed_at":"2026-07-08T00:24:22.571791Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.572426Z","title":null,"venue":null,"work_id":"9b917921-9d76-48c8-b44d-109d82f6756c","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8dea8a0c4f22366acaf176a5e1744b9da8a8279012c0dff8286f445407df9ac4","observation_id":"5a8b81da-a772-4f57-a5a5-dfe7da838120","resolution":{"observed_at":"2026-07-08T00:24:22.573764Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.626322Z","title":"improvement","venue":null,"work_id":"895b2c10-7e5a-4801-8387-e330c0e3f3ca","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:ff9e11fec71c2d516e63c197263444cec569a6788228f5585f94cac19cef08f1","observation_id":"77cc1808-e03f-4ec5-a7bc-47c7ce2c8439","resolution":{"observed_at":"2026-07-08T00:24:22.627707Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.568310Z","title":null,"venue":null,"work_id":"727848c9-8966-4e7e-8312-8596a444745c","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:8426bab7c931cd1656798a9e15616f58c5af1e444433b0569874bcafe187452a","observation_id":"7365928a-8c67-4836-9fa3-ac72178eea75","resolution":{"observed_at":"2026-07-08T00:24:22.569589Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.598348Z","title":null,"venue":null,"work_id":"a578f112-217d-4f33-b218-973df3cb039b","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:d68fac5a97da1594acbb83cd9008aceedd94caa8a4f38bbb3e603bc7ae21465e","observation_id":"95938d8b-97ef-402e-a27c-0c6655781963","resolution":{"observed_at":"2026-07-08T00:24:22.599549Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.599894Z","title":null,"venue":null,"work_id":"2e5182c1-51b6-4d32-a960-ac309cf0d71f","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:ec2ae840f6945d26d51c18346f7beb2ca7931584111bc26567fcfbf8e55bdafc","observation_id":"d98e770f-07ea-4a2d-9b4e-f8ccd2531da8","resolution":{"observed_at":"2026-07-08T00:24:22.601376Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.557855Z","title":null,"venue":null,"work_id":"13d40288-4698-45f0-893b-649cf0cb41f2","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:b8f9f3ab2bd71eedc9518bf1431d7bdd7cc6c72b2defc9bb07f0105bc62628f7","observation_id":"6288b007-0d85-465d-a008-eddf73b740c7","resolution":{"observed_at":"2026-07-08T00:24:22.559110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.589481Z","title":null,"venue":null,"work_id":"e4379269-a839-4ac5-bf67-5213d11c4254","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:615bbe79da317d842522c978bc7f1a623620d9d1c20ff95889e81c5b3fb77550","observation_id":"0695b283-8a84-4e3f-a77e-bc8482285141","resolution":{"observed_at":"2026-07-08T00:24:22.590489Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.632138Z","title":null,"venue":null,"work_id":"31db1572-8be6-41a4-aac7-601bd163a0f5","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:be698af45096a28d94cb33882d5a66e21845c38a448d5088b4cd81501e101f3d","observation_id":"ecef514a-d2c0-489f-a1a8-c613ef4e737c","resolution":{"observed_at":"2026-07-08T00:24:22.633513Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.624571Z","title":"the correct answer","venue":null,"work_id":"25dbfd30-ce40-4664-b4f1-9c1ee0d1fa34","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:d780a5eeb970ec0fe2b8ffd6d1d46c30f3945f69431f20ff123a0356db9bdbe8","observation_id":"6d363062-8560-4752-8837-32f715bd4014","resolution":{"observed_at":"2026-07-08T00:24:22.626095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T00:24:22.591032Z","title":"verdict\":","venue":null,"work_id":"5df462e9-faac-4bdb-a0b4-d87d7b53c226","year":null},"citing_paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-08T00:18:55.016013Z"},"links":{"citing_paper":"/paper/2607.05189"},"observation_digest":"sha256:88779fb47c40007f7d9c83c8069a65d0f066963b3998bf4bb6c898c10850aabe","observation_id":"70cac6d0-b06a-425e-ad41-c9d797cc1ade","resolution":{"observed_at":"2026-07-08T00:24:22.592150Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.05189","last_updated":"2026-07-06T15:08:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-09T23:18:22.372649Z","submitted_at":"2026-07-06T15:08:58Z","title":"When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":10,"verified_exact":7,"verified_fuzzy":40},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 0 inbound Pith citation observations for arXiv:2607.05189."}