Paper Citation Record · LEDGER

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety

As of 9 August 2026, this Paper Citation Record lists 19 of 19 outbound references and 1 inbound Pith citation observation for arXiv:2607.07097.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.07097 v1

Coverage vector

measured 19 of 19 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-09T20:14:36.433937Z

measured 20 of 20 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T00:48:48.474079Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T00:48:50.245389Z

Reference resolution

19 of 19 outbound references displayed

verified exact12
verified fuzzy1
unresolved6
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation d5a08844-f89b-4b88-bcb5-89dfcd4a8862 · outbound

This paper cites AI Agents May Always Fall for Prompt Injections.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety AI Agents May Always Fall for Prompt Injections

Reference 1

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.346583Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7d8c4b92-7e83-4dcb-9388-3c5b5b430ab4 · outbound

This paper cites AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents

Reference 2

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.364433Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation cda030a0-21b3-4a28-a10a-6c020d083e63 · outbound

This paper cites Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 3

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.363975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 937a402d-e2ae-4931-a38a-7d1b135bacfc · outbound

This paper cites an unresolved cited work.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-07-09T20:16:29.597201Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 181f2525-ba32-4d6c-9d3c-b84d3607a71d · outbound

This paper cites an unresolved cited work.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-07-09T20:16:29.599145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 620cf7e8-a5dd-4269-8d0b-9440d915984d · outbound

This paper cites an unresolved cited work.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-07-09T20:16:29.601267Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5295bdfa-6893-47ce-8f11-a45cb9dbb51e · outbound

This paper cites ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation

Reference 7

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.113708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 4fdfb801-e33b-44d1-8a30-1c7c404c6609 · outbound

This paper cites FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety FlowSteer: Prompt-Only Workflow Steering Exposes Planning-Time Vulnerabilities in Multi-Agent LLM Systems

Reference 8

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.361643Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation d7591de6-7328-462e-a7f6-6d926dff32be · outbound

This paper cites Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems

Reference 9

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.369931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7aaf65b2-bd64-4174-8605-f8bd8056bea7 · outbound

This paper cites The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure

Reference 10

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.355275Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 6ecf1f90-76c9-41b4-9b61-1be4aa347cb7 · outbound

This paper cites AgentCollabBench: Diagnosing When Good Agents Make Bad Collaborators.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety AgentCollabBench: Diagnosing When Good Agents Make Bad Collaborators

Reference 11

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.358011Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1d81b9a7-ab62-4284-825c-935ee6e6ef6e · outbound

This paper cites Myers and Barbara Liskov.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Myers and Barbara Liskov

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-07-09T20:16:29.601461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation b333286c-8d15-4c2a-9d2a-70e8cd1e3269 · outbound

This paper cites Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate

Reference 13

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.370107Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation dedaafb1-0aa6-45b0-97d2-3ca92045901b · outbound

This paper cites Multi-Agent Systems Execute Arbitrary Malicious Code.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Multi-Agent Systems Execute Arbitrary Malicious Code

Reference 14

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.367118Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c34485e8-ee54-4313-90d5-1a7ccb6e0e04 · outbound

This paper cites an unresolved cited work.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-07-09T20:16:29.603507Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f24cb5c8-7d5d-4dde-abf6-a1448b393c7f · outbound

This paper cites ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection

Reference 16

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.353112Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 93a4c750-a259-42b6-9444-b296f6e8d307 · outbound

This paper cites an unresolved cited work.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Unresolved cited work

Reference 17

Resolution: unresolved; raw_fallback, observed 2026-07-09T20:16:29.607262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f2b3d2c1-0687-416e-a32a-34bc5457cb83 · outbound

This paper cites an unresolved cited work.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Unresolved cited work

Reference 18

Resolution: unresolved; raw_fallback, observed 2026-07-09T20:16:29.605438Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation cd95b6ca-93a4-4171-a9fa-3a20fc84a7db · outbound

This paper cites Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition.

Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition

Reference 19

Resolution: verified exact; local_arxiv, observed 2026-07-09T20:16:29.372532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Pith citing papers

Observation c1131312-66ab-401b-9424-f9a97a5eef6b · inbound

Single Canonical Prompts Underestimate LLM Safety's Surface-Form Sensitivity cites this paper.

Single Canonical Prompts Underestimate LLM Safety's Surface-Form Sensitivity Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety

Reference 8

Resolution: verified exact; local_arxiv, observed 2026-08-05T00:48:50.397734Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.