{"as_of":"2026-08-10T04:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:205b1bac432a2559553a82f2e23f28a033482d0a9f22493591a2aa77efa57273","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-11T05:27:35.040138Z","state":"measured"},{"denominator":40,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":40,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:33:20.388698Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.06595","snapshot_observed_at":"2026-08-01T02:40:29.364739Z","title":"When agents remember too much: Memory poisoning attacks on large language model agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25379","last_updated":"2026-08-01T10:03:47Z","snapshot_observed_at":"2026-08-06T23:11:27.985138Z","submitted_at":"2026-07-28T07:34:37Z","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T02:40:29.364739Z"},"links":{"cited_paper":"/paper/2607.06595","citing_paper":"/paper/2607.25379"},"observation_digest":"sha256:b7295e6984820d5e853b28e9f99119e44dbf42bb98503255b3c29514e15f3f33","observation_id":"53377e7c-862e-442f-991b-047f60b79486","resolution":{"observed_at":"2026-08-01T02:40:29.364739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.06595","snapshot_observed_at":"2026-08-04T01:33:20.388698Z","title":"When agents remember too much: Memory poisoning attacks on large language model agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.25379","last_updated":"2026-08-01T10:03:47Z","snapshot_observed_at":"2026-08-06T23:11:27.985138Z","submitted_at":"2026-07-28T07:34:37Z","title":"Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:20.388698Z"},"links":{"cited_paper":"/paper/2607.06595","citing_paper":"/paper/2607.25379"},"observation_digest":"sha256:d02caae1b19202fecbbe2106f3c4edece5fb15af8b425dcb44f3f5d3144ecda5","observation_id":"4b2b64cf-abef-4114-9ad0-1c5b1834b20d","resolution":{"observed_at":"2026-08-04T01:33:20.388698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2607.06595/citation-record","integrity":"/paper/2607.06595/integrity","json":"/paper/2607.06595/citation-record.json","paper":"/paper/2607.06595"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Toolformer: Language models can teach themselves to use tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:a6c303fa0adf3458736f80ccbba44bd9ceff6bfdf4f4f4a642b2128c1417b595","observation_id":"439a6131-64de-4141-b4d9-639aa158f240","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"A survey on large language model based autonomous agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:7e13cecb0fba0ce7d39929e3356f6bd2d10c8b17918cf3086f75bd25d049aaae","observation_id":"9dd4435d-1d6e-4456-a70e-8796c658c16b","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"MemGPT: towards LLMs as operating systems","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:4b86746b219fe0eeb12064097578e602573e8a0988776c5617d0d5d04320a4f3","observation_id":"8c9643f8-c00f-4071-ab8d-f96b6b8aab9b","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Expel: Llm agents are experiential learners,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:2560ffa9be442fb7d65a0143a134316727105d49fbee2eced2caae81617c7829","observation_id":"2d40773f-6347-4e64-9643-a1e7c4392c90","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Memory os of ai agent,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:d4b0997fcd9448db119ef2eb287027f86a73fb9b0c7fdaa2ac5337381ba3a2b0","observation_id":"54753d03-72d8-433e-96ae-8de03fb148ed","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03610","last_updated":"2024-02-06T00:53:27Z","snapshot_observed_at":"2026-08-07T06:11:17.290504Z","submitted_at":"2024-02-06T00:53:27Z","title":"RAP: Retrieval-Augmented Planning with Contextual Memory for Multimodal LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03610","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Rap: Retrieval-augmented planning with contextual memory for multimodal llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2402.03610","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:00f029199a2002ad477f2910a1526988c64559b5024ba090c0d8ff5f1ad13a7f","observation_id":"dfdead94-6d49-467f-bceb-06386909c844","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"GPT-4 Technical Report,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:0d11fb2a942361e7a4e31c6e6a21e378d98ab6dec1db0f91c228996ec8d3df56","observation_id":"4a2c860a-ca9c-4d5e-8088-23af18c96d8a","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Introducing Devin, the first AI software engineer,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:2912a4437b19de4db321ec49c23010fb4c5f3f65baca1e615e97198ee9824a5f","observation_id":"76170cff-b2eb-43e3-84c7-1c869a4001a8","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Adaptive Memory Admission Control for LLM Agents,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:75a0ebac9a33d0c8e4f1bc6258f6f1c3a8a5175f695aeab7cdfcfbd833d891f9","observation_id":"101269e8-895f-4a7c-849f-569e5e2a9ebf","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:0703a0b872183faaa65ec4d71aa5e1eea9870a40f23e7d9afa45cba124d37360","observation_id":"83025ee0-ec0b-4f3f-bf5d-b679f31f57b4","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Memory Injection Attacks on LLM Agents via Query-Only Interac- tion,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:62c5378b3a0e3785369c1b97111c8f78eab17d1556f08220ff4697778fc44d6e","observation_id":"5b0f7603-85bd-4f60-a3a7-6c2c030d00b3","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:7c2ca5d2d3c8fe5406f73216b384e8510f8ea3e71ea891d7e1d51f457abafab9","observation_id":"913b7b37-c809-4fa1-a761-0f213309815b","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10634","last_updated":"2023-10-16T17:54:53Z","snapshot_observed_at":"2026-07-06T16:34:04.003157Z","submitted_at":"2023-10-16T17:54:53Z","title":"OpenAgents: An Open Platform for Language Agents in the Wild","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10634","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Openagents: An open platform for language agents in the wild,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2310.10634","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:dd3d776633afa11a5c901e64824e22eeebd8107a71f6dae2e732a2ba70df44a7","observation_id":"47ab995c-1bd6-438c-add8-02c77ad0258a","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"AutoGPT,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:ac261655ddfff48b85a5f5d80d38446d8982c030163cbc9db5cf0b6de3135f31","observation_id":"f1896d1b-b113-4be5-9465-f5ec3913cd39","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"BabyAGI,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:ec9369e713edea6a8702f8c47787f8cfc298705be5c74a99dd6119cc5acbcd85","observation_id":"e56749a4-3202-46bd-9d87-cf2244a1b841","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"React: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:a7d87957ebd172d8663eaa614c133a13ee87d9be1789702672afc3e7a74d500f","observation_id":"ddd31218-394a-4bc7-8e16-876c6aaaa0ef","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Claude Model Card,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:34b7ac636d3d711cb22641c6b55e237bb060cde60df325601a24d9bc51a8ec26","observation_id":"6a528ffe-fb07-409f-aaaa-cb39a9c338ef","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"The rise and potential of large language model based agents: A survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:b104bb2c33cfe489aa53ec2d34bf1f859951ea22f98661f8cd0695cc7d2d7486","observation_id":"2070d7f4-5965-4433-94be-3f515fb4f666","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:5807e397c1fd7ac569fb1d105079d4f856fcc8f0ae9109a1c74a8a0166061774","observation_id":"3cb5f664-c60f-4a0c-80e5-2f0ffac54e2a","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Retrieval-augmented generation for large language models: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:16b2e2494a51c3d37fc0dfb31d793494e56f6ab10d22a726e9d844de20917102","observation_id":"b4b952ba-b905-48b4-a442-7fc239be80e9","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Generative agents: Interactive simulacra of human behavior,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:107adde2d7ab30b3047a4cc294354cbe09a6c44022329f319855f6dc9d95fcc5","observation_id":"1655aba4-52c6-4dd0-ae2b-a7d6fd42b200","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12110","last_updated":"2025-10-08T01:46:37Z","snapshot_observed_at":"2026-08-03T02:27:06.991396Z","submitted_at":"2025-02-17T18:36:14Z","title":"A-MEM: Agentic Memory for LLM Agents","version":11},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12110","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"A-mem: Agentic memory for llm agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2502.12110","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:42b494a199374509bca5924d0976b990c2017a10c6a792824ff76c2280965106","observation_id":"8616f16c-5268-483f-bfe5-fb4d7d9cb2bd","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.11366","last_updated":"2023-10-10T05:21:45Z","snapshot_observed_at":"2026-07-06T15:05:53.556198Z","submitted_at":"2023-03-20T18:08:50Z","title":"Reflexion: Language Agents with Verbal Reinforcement Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.11366","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Reflexion: Language agents with verbal reinforcement learning, 2023,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2303.11366","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:c114432e93eadce67f6a10a04cc8240780844f01e97d6d2015bd75b578001511","observation_id":"d0b17f0a-69a3-478b-9893-15562eb0ebc7","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Hackers hijacked instagram accounts by tricking meta ai support chatbot into granting access,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:334f875dd2e475190bd626fbe691448f03612055c61b15bd37dca88c361892e5","observation_id":"c08d81bb-167f-4fb2-8e64-fd11d9305024","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Zombie agents: Persistent control of self-evolving llm agents via self-reinforcing injections,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:7b5cefd069a52d41e51b406ec8fe297deb1f41686fa39285bed60780a8df211f","observation_id":"b4228350-0c31-44fb-8937-5ed4050a6f1b","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"MemoryGraft: Persistent compromise of LLM agents via poisoned experience retrieval,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:22b99fd95b7512611f6c0ca0a5765d036fa5eb789e1a7cda95fb4bca0552bcfd","observation_id":"801851be-3829-4ce5-ada2-5d5e9e7cabf5","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"A-memguard: A proactive defense framework for llm-based agent memory,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:f5bc194a55baed1f5bd9000a139ced1ffc22b64fbabc25dcc8b7a2e8264202a7","observation_id":"0e789a2f-5f24-4c3f-bf2d-50111373dfe8","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"The enron corpus: A new dataset for email classification research,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:f85d687e07c805d50bcaada5da097cfb517d84200924456e65e5cf0a519242fc","observation_id":"5d80328a-75fa-443f-96b2-fd4e9241aae9","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.10084","last_updated":"2019-08-27T08:50:17Z","snapshot_observed_at":"2026-07-06T08:17:05.681370Z","submitted_at":"2019-08-27T08:50:17Z","title":"Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.10084","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Sentence-bert: Sentence embeddings using siamese bert-networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/1908.10084","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:22471a34d5d33357ea09c649fb9415c4741b5fc66b5400a5b1b7702d8e0b21d2","observation_id":"4d06a7a8-f0fc-4ed2-a601-49e5fc1cc35c","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07597","last_updated":"2024-09-24T03:01:25Z","snapshot_observed_at":"2026-08-09T21:52:29.568774Z","submitted_at":"2023-09-14T10:57:50Z","title":"C-Pack: Packed Resources For General Chinese Embeddings","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07597","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"C-pack: Packed resources for general chinese embeddings,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2309.07597","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:b9b93dd93d9b9ceb6c17ec3218d54befacb57bea9785aceec76d1560c4370ee9","observation_id":"1d944d67-17a4-4950-90df-6f9bedeb559e","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Internet Crime Report 2023,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:46ed80e1e47cc9c5b58911d345953a86d2149ff6ffd2c6fbbabe2dcfe99ed82e","observation_id":"d85ab5fa-1dd9-4d5f-95e7-44b0c4766197","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-02T07:32:11.339534Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Mem0: Building production-ready ai agents with scalable long-term mem- ory,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:42a6305db4b5dfcd0d97f5115a3904d02588e46d23062de7901afbe67f509266","observation_id":"59711235-f876-4f4d-b995-cb147ffedc2d","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Letta: Build and deploy stateful agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:41fd79449cd47bb76609640374f1b6bb9710c3646ccb461155b048e4a81aa6c2","observation_id":"45de8a54-8d34-4d72-a56c-c1e9d575db57","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Evaluating very long-term conversational memory of llm agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:1d2e28b6b5215d3ed4ad7be632915147adf9b01c7788aa2c7052b7a9d40a3c3b","observation_id":"1fef317c-697c-4d20-aa0e-7cd3c883e305","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"HotpotQA: A dataset for diverse, explainable multi- hop question answering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:1ab450a4d2d96124b3462300e16adbcc8627e2db174b163fe4de4c66b8c27f85","observation_id":"876bc714-5593-4b05-b08c-077639e91d4c","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Webshop: Towards scalable real-world web interaction with grounded language agents,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:04439964c1c92dad998af21045946ea01af9db6a42dd9e4241432271b5d90def","observation_id":"0497be8b-4cd5-4b85-ba41-dbcb221ac661","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Defending against prompt injection with datafilter,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:e40bc4c7a1acce77bf70859f73907b137c8edf980c5d6c16bbb655a3f393aeea","observation_id":"848fd943-adbd-4482-be73-8c25315b84c7","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.15219","last_updated":"2025-07-21T03:41:44Z","snapshot_observed_at":"2026-08-06T15:35:31.690602Z","submitted_at":"2025-07-21T03:41:44Z","title":"PromptArmor: Simple yet Effective Prompt Injection Defenses","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.15219","snapshot_observed_at":"2026-07-11T05:27:35.040138Z","title":"Promptarmor: Sim- ple yet effective prompt injection defenses,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-11T05:27:35.040138Z"},"links":{"cited_paper":"/paper/2507.15219","citing_paper":"/paper/2607.06595"},"observation_digest":"sha256:7890c5375632a4591f236d3a82da418ed5304eebb1974326a5a4e6e20d94de25","observation_id":"54f52f77-7077-4c43-a311-f9e780b67435","resolution":{"observed_at":"2026-07-11T05:27:35.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.06595","last_updated":"2026-07-06T19:30:53Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T13:13:43.616360Z","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 2 inbound Pith citation observations for arXiv:2607.06595."}