{"as_of":"2026-08-08T16:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e3834250c5b7814602a11df1418441dc7e52a797d54dbbf027028c5a8203ea6b","coverage":[{"denominator":78,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":78,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-14T03:26:15.676915Z","state":"measured"},{"denominator":78,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":78,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.11751/citation-record","integrity":"/paper/2607.11751/integrity","json":"/paper/2607.11751/citation-record.json","paper":"/paper/2607.11751"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:a538ae70e857e53c1de9b2e288d0de436fd38ed3e90802e9c57fbc5ea7026f38","observation_id":"649a440b-68b5-44d4-a4b8-9f25e0965f82","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"R-Judge: Benchmarking Safety Risk Awareness for","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:1c874ce390d952a9cc9673699aa74d54ea1926498e4426a77eb47526bf83afc8","observation_id":"ad0225e1-24ca-4df7-a65b-ac8bdd8a95f3","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:ca5c78b9497282d7931bf736f698b96aa094cf4b9ddde86d6f7b77989f6e48c3","observation_id":"77db2a3f-1581-4c02-8689-f5739195167c","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:daa4233cda292bfb8c1dee637513e098e6be9b01f4009830e688a6bb3af31fd3","observation_id":"c1651a61-ba26-4221-8520-811656cf6b32","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"and Hashimoto, Tatsunori , booktitle =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:ec2176dbd0c573778bfc73df753854de09feca7940e203de58fc9031a1c87b8c","observation_id":"0e9dbf34-282e-44c3-822c-fb4b0c3821c0","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"ICLR , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:df660de1d2233958ededdb4f2596a0f24e1e1cf2cac9e85fba267c95dd2af4e9","observation_id":"ceb2b6d6-15da-49ea-80e4-2c9949ada6df","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Nature Machine Intelligence , volume =","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:f27803b473b978be337c02fafe27b82ecb121388d33f3e488c3462f336bc4ca9","observation_id":"13f30ec9-91d7-41f6-ba01-b5f9a04b1c95","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.02324","last_updated":"2018-04-16T22:14:06Z","snapshot_observed_at":"2026-08-06T11:21:56.268167Z","submitted_at":"2018-03-06T18:23:08Z","title":"Annotation Artifacts in Natural Language Inference Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.02324","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"NAACL-HLT , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/1803.02324","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:3009022707bc53a93d9645b30d844f64d1f15657a5092104bbf7d018cdfc6ead","observation_id":"de701992-3b71-4d5e-b29a-db8e770714df","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.01007","last_updated":"2019-06-24T16:02:01Z","snapshot_observed_at":"2026-07-06T07:30:52.835880Z","submitted_at":"2019-02-04T01:54:19Z","title":"Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inference","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.01007","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"ACL , year =","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/1902.01007","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:ed08971d8a38744fc30834d5249f0f0c0fdeac8ac9fddc73e4ff34dee1048b59","observation_id":"0b513ff1-0ce9-43c6-bdac-66c625b66247","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2026 , eprint =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:de8dcadc20993bee817821fbbf880dd9686ac26a1a647c3117ad7fe86d0ebc9d","observation_id":"f933f4b6-dcd7-4a48-8921-a41b2b317e27","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2026 , eprint =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:f9286ee53ccd074660774a40a61ccb8900c127e89bc72ea71e83a06259ce883c","observation_id":"84eb7193-f2f7-4fca-903a-bdb1b1cd3ac3","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:3f1fae03c5fec41a774384ea7f20f27f250632ddb959f4ec3b5213dcb869269e","observation_id":"e6c95c0b-2b8f-4d84-b4fb-7dfeec391db6","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2026 , eprint =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:3efbbc4c7deac57ee556dd62360309f3e5ff37264f15172c51d8d94810932af2","observation_id":"9ebd97d4-055c-42c0-9f54-db0caf999cdf","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2026 , eprint =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:16cb7a659e7736b72a8db114afcee585c6565ff1e05c26dc7239b104f9036f83","observation_id":"f3052928-2c7d-482d-8088-fec0fb9494d5","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:ac761e9ba16cb8caf8e088bc32233aad149edea77417cfde5ff505d07b7d0df4","observation_id":"89bf462b-5b61-45f5-b50d-fcae8516515a","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2026 , eprint =","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:a26a9c8d625fc5d42ae27d9f46c6b5ee2ec1205e8614b6f01d0fb87d7811c578","observation_id":"8ae2da44-391f-4f5c-b499-0bbd68b6340d","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:0292abbf8cc17da7849398565490f007ee18f4017d53b0c3b70566aaad9a96f9","observation_id":"553e10df-778c-4ee9-9790-b14a690e6567","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"International Conference on Learning Representations (ICLR) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7e305e18c0d28de8d30e26d246892a1c4b759bb1e78dc7867c0ba6983b25aa25","observation_id":"cfd24277-d8fb-48a0-8d81-b59ba9915c33","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.03442","last_updated":"2023-08-06T00:21:19Z","snapshot_observed_at":"2026-07-06T15:13:13.695535Z","submitted_at":"2023-04-07T01:55:19Z","title":"Generative Agents: Interactive Simulacra of Human Behavior","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.03442","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":", title =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2304.03442","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:f19f52814fa9fc3fcba9ac83232fe51daba356fe67faa97e4a3eb041cb6b3be5","observation_id":"36e451ce-2d00-4a1c-aff6-b0dab3f250be","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-07-06T14:55:08.682906Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec@CCS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:5dc06267716df3f603abe5b7d0046a51a549a5b5471e04a03b5220e8c8771bd6","observation_id":"2cbe4f57-477a-4f82-bb0e-abae5e82d0ac","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:4047810afca9514c28b271e49bb6576b9d0258cfdf4aa9d0b0d5d91ffad941b0","observation_id":"0eacc0f1-3226-4bc8-827b-0346ebd577df","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Proceedings of the Association for Computational Linguistics (ACL) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:4ea355234bc3ce72cca152cce06f7980f9b39ea24b9fb76d9c00d85fb2e5f8a3","observation_id":"65238199-9114-41f7-883a-cbc1d9c64913","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Reliable Weak-to-Strong Monitoring of","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:8a5bbeeccbff2467efbab56e236c42c23ee1af477513ccffa2fbaa645bd0ef14","observation_id":"d082e339-521a-46e2-afb2-61e4d162770e","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:29f84f227e5d0bff389dbdbdbb1274a9bbaa6701644902306291774c56f09de4","observation_id":"81c66d89-ff24-402b-b177-206cc8079f8f","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:db972db88ad46f6436822e031f85252360c2babbd1808cb22b7b1fbb8188d285","observation_id":"d99d0355-3f29-4b9d-b786-fdd7ccd844a1","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2025 , eprint =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:b68880e67802cfd614b5b3ed226c424e54fc00b847a88844cd8d2f77dc07aa63","observation_id":"d3856fa4-2a9a-4489-941b-52d5cbf650b1","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Communications of the ACM , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:9d72f1015ac8dfdcbc6ba9fcb0d3f879de101cf6150334450ec1e3f2e3a56d5a","observation_id":"2a011f36-c369-4ccf-ad82-7504340eb9a3","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"IEEE Journal on Selected Areas in Communications , volume =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:c6c80cd66dc7693523f1f64828771709de95b6033bc0c99f2b9782d79a69b9c9","observation_id":"1ebf2884-f5f8-4b8a-98e7-e481893f34d0","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Network and Distributed System Security Symposium (NDSS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:ac48e65ef9c4025ce567011310a34eda4a430b04ac9d855cf5f656c8858f60c1","observation_id":"25fd7d23-cedd-4ab6-971d-d80adf1de9a2","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.09527","last_updated":"2022-11-17T13:43:20Z","snapshot_observed_at":"2026-07-06T14:19:47.424778Z","submitted_at":"2022-11-17T13:43:20Z","title":"Ignore Previous Prompt: Attack Techniques For Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.09527","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"NeurIPS ML Safety Workshop , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2211.09527","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:361b04aee52433bfcef32db0fbf3db788c0d356f9be7fdebd4e3d798d737c8fc","observation_id":"fcb8352d-832d-4f8f-9be9-42986a856da2","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Advances in Neural Information Processing Systems (NeurIPS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7fa9ecf5168777bb54fd37c2c9e47dd567c5fe5c382f40d49cb5bcb0e0186616","observation_id":"9d2d98a2-2325-43be-9801-3ee1de76d6c4","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"International Conference on Machine Learning (ICML) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:b6fa83ea7e8e85a8f1cc916ffc9b496baa10fda96ea7e2fbc044b647d466a042","observation_id":"c0b0b429-39a5-4d3a-b71c-b24b331c8dad","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"IEEE Symposium on Foundations of Computer Science (FOCS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7bdcd1fce207491b52c1e574c8fdb3ee6e85a86effb6b9314f9e18e5fe83cc18","observation_id":"61b046b5-e72f-485b-89e5-7a2bcb9a0ff8","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Advances in Neural Information Processing Systems (NeurIPS) , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:e3755f045826f30346d6cf8eab4b4ae2deed39895c3cf56d7288ba8d59e9d437","observation_id":"3d562bdf-e1ff-447e-a879-5c2b9e46c779","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2023 , eprint =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:9c40447a4e3747c32b944c8d98ce538ef23a36c2eb7f720d50eb99f23f2e7ed6","observation_id":"e6f3ba69-3443-43e6-ac00-1ec030614942","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2024 , eprint =","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:5f9e31a093ea870402b233bd18557cddc25e64414066877a1ec3f1b971ec953f","observation_id":"14f2a00d-b1a4-4a99-8932-f8fa0b5d0b0c","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"2023 , eprint =","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:bb73693ec52baeaa3656c0d94f40cbfcdc839a7b0362bfca35de31877a9af454","observation_id":"79ebccee-c3f2-4d20-979a-1482affbf32f","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:cfb5a11dfcbeb19f61fdaf82088eee4cea0972c82d47bdd333f12f9848f7644a","observation_id":"578cb9ed-730c-4b1a-9560-ce3239046717","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:c5408d5325da795d108bbf114f9d13cf8d780577fa59eb8e3f68b79ddd964026","observation_id":"68a3aae9-72d8-4d92-867f-557c2fb0757b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.07223","last_updated":"2026-04-08T15:46:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-08T15:46:14Z","title":"TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.07223","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2604.07223","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:3d33ecaea958ff5a98bc513920193acead62a066172a1676d0c00a498fb76f8c","observation_id":"d2400e9b-8615-46d9-8628-bb2d12e0a981","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:ed0b5ffb2ff0364b0c199fa6c313ae6be0dffcdf529dd2fd97d644a53526b055","observation_id":"bd898291-c177-4544-ab6d-5cce6c47bb76","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":1976},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:5e33658688a27bb3ccf323117429da829c31dbe5554af25a03db2273d972d1d5","observation_id":"ad7285ae-771e-4b9c-a6c4-955b6ca7b84b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:60fa72e9899188e148ea0e8a2e4d19f4df67d98d065bae222213407bc27ce9ad","observation_id":"9389bd51-43a8-4d81-b9b8-74949ce6622b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.11642","last_updated":"2025-05-27T15:31:58Z","snapshot_observed_at":"2026-08-07T15:44:32.779435Z","submitted_at":"2025-05-16T19:08:29Z","title":"PeerGuard: Defending Multi-Agent Systems Against Backdoor Attacks Through Mutual Reasoning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.11642","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2505.11642","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:05f5cd8ae01d6b13f89c3dd3322d43d47a9b813388c6dc3b0299620d67cb1b56","observation_id":"166fa073-4e01-4383-93e6-481b571c755b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.06811","last_updated":"2026-05-28T07:57:37Z","snapshot_observed_at":"2026-07-13T08:51:18.197463Z","submitted_at":"2026-04-08T08:24:48Z","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.06811","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2604.06811","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:baa8d29b3bbc9912070340176729c94ca5cf76b60f510be4a1542241f93c1ebf","observation_id":"1993cb92-657c-44b1-b05d-5327ec0da59b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7fb961bc9241fec7d1d97cdd3e80560ffa31e6eb962d81acf518d93edd0f4c6c","observation_id":"3d7ab1e7-9149-43b3-93d4-e3457926fca0","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"A.; Tihanyi, N.; Hamouda, D.; Maglaras, L.; Lakas, A.; and Debbah, M","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:027043e784e073c43b80788becddaf206813ea1d96624a3d5c8142badd550b29","observation_id":"bd7a5dfe-6837-473e-ac3e-056afc53dd2c","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:e501849001aced00d4135ee5b33b7289fc9bef12b635ca668b1314da8193ac87","observation_id":"415dd859-dae4-47b1-914a-53fb74d408ff","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:480a9ab4fd733e58f1971b4b4cf5806d3c0e9b3e41cd7e0c2cef9e3b9878fef9","observation_id":"c93ea069-43b3-43d0-abdb-0375d0acaf1e","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10719","last_updated":"2023-07-20T09:25:02Z","snapshot_observed_at":"2026-08-07T03:36:52.924251Z","submitted_at":"2023-07-20T09:25:02Z","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10719","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2307.10719","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:5185fcb4b5498653a9efa3279be03d99d24766814acddda582ac36e90976fa81","observation_id":"651648e5-3e9a-40f1-b433-d7409df2cef6","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"P.; Vaikuntanathan, V.; and Zamir, O","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:29eb054add3fb72b227539148a25b378b44c7d1248cf0e5197c6d13692bb9cee","observation_id":"61cbf305-587b-471d-af3c-e67f9d70bc97","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7d477e05bc3b79e47e82f646aa06e6cb7b5bc005d863dd679e9c326c5439c4dc","observation_id":"35e80b1d-c1ac-4170-8066-9e9ad83cf5e9","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":57,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:5d1c0d6cb0095a474b0e1954972f7b1ae4a338d56fde5637f043e3f331e60329","observation_id":"d2858fa4-ad2e-4335-9de6-89c2ab868e53","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"R.; and Smith, N","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":58,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:9e1df806c025e3904c67eb4455a0819781ce665aa38d686f20a6888c4ef76b34","observation_id":"924eca52-4d7c-4006-b2e3-6f6590f3f61e","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.06781","last_updated":"2026-08-05T07:02:49Z","snapshot_observed_at":"2026-08-08T16:10:21.163748Z","submitted_at":"2026-06-04T23:51:14Z","title":"When Better Codebooks Are Not Enough: Predictive Performance and Behavioral Reliability in LLM Political Event Coding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.06781","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"R.; Brandt, P.; and Hu, Y","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2606.06781","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:99a5eb3571bd7f2e12a456db97c387b92ef6d88b1822357e18158200eb1a6d45","observation_id":"adece273-a3c6-4744-89b5-14c38c0cede7","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.01685","last_updated":"2026-05-18T13:25:30Z","snapshot_observed_at":"2026-08-01T18:43:58.885383Z","submitted_at":"2026-01-04T22:50:23Z","title":"Lying with Truths: Open-Channel Multi-Agent Collusion for Belief Manipulation via Generative Montage","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.01685","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2601.01685","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:a69e06b709779d38eb60b2a3ef05788eadb5e0e327d36d773e28ff53e14b9354","observation_id":"ebd9da64-6d3b-43cc-bed5-0b6afbf58332","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.05545","last_updated":"2026-07-06T18:27:19Z","snapshot_observed_at":"2026-08-02T19:22:43.600850Z","submitted_at":"2026-07-06T18:27:19Z","title":"Most LLM Conformity Needs No Speaker: Measuring the Speaker-Free Floor in Peer-Pressure Benchmarks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.05545","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":61,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2607.05545","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:aa250bf14598c78ff9b1c726bf41bd9479468d5bc10647390a8fe13d1c6e07c9","observation_id":"cea0f91a-d58b-461f-908d-72b57162618d","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":62,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:b3744ede0ec1b164535b1ee87ae8d413ba771bd91f6147f6ecd3b22f60f6ef5e","observation_id":"cca1bcfe-9ff8-4db0-aa9b-1e80d29a9db1","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:069f8053d8a1d4e22d88db3a8308b3a091a1b24c96a3904408b7f3066f1d472e","observation_id":"1a02f329-555c-4bb5-8454-ac8c5abdc0b2","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19461","last_updated":"2025-08-26T22:29:31Z","snapshot_observed_at":"2026-08-07T19:17:20.900756Z","submitted_at":"2025-08-26T22:29:31Z","title":"Reliable Weak-to-Strong Monitoring of LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.19461","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":64,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2508.19461","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:4f0df2ffb4f844c4ea68fd1a4a0ef796fbafcab6fd9d23d35bf03782e3436161","observation_id":"182cbb43-dd67-4b52-8851-83f394d7e5ac","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":65,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:b74bde957f0bcaca0d6405ed56152fd4e6c75d1be326c5e584f0f39689f018b0","observation_id":"b4346249-78c4-403d-be57-0c6feb4d0a2b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.08336","last_updated":"2025-06-11T01:39:01Z","snapshot_observed_at":"2026-08-07T22:32:21.983693Z","submitted_at":"2025-06-10T01:45:56Z","title":"Your Agent Can Defend Itself against Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.08336","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":66,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2506.08336","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7e419adcda21ac96225c9bbbba5eeea3104c156020265ef2a978acab141a2fa6","observation_id":"d78d9c3f-a3a1-4006-93c7-a17061f72b00","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.16914","last_updated":"2024-11-11T23:08:20Z","snapshot_observed_at":"2026-08-08T10:16:33.808623Z","submitted_at":"2024-02-25T17:43:29Z","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.16914","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":67,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2402.16914","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:a06daaa3ac3195b87257267cbe7e4181454f42fa3a5ec551d458ed107cd8d9cb","observation_id":"1f1fa684-7095-42ea-8e95-324843271df6","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"T.; Pavlick, E.; and Linzen, T","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":68,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:e2eed88f0ea975b7765a89b1d5bc6a70d689c487ac0419b62cb5de3a09e84e95","observation_id":"3ab409cf-b682-40ed-9f3b-673536cd0948","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":69,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:555ef1302b065c014ac91bf91a9b5fbea2ff1876eee50adb4423c22302ca5191","observation_id":"e8d9de3c-6e20-45f4-9596-0608de22533d","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"S.; O'Brien, J.; Cai, C","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":70,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:c591791f59254164628985dc9136ac248cf11025a9ba78acd27a27d50886b4e0","observation_id":"4f0195c7-d470-4d21-852e-bdb0b10391a5","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:e9dc9ec82f6f80170f3175ea7359b48411cf52c0a0cc651e61e7c62bdd0968ce","observation_id":"98d71083-6848-4545-8ed7-6867a573fc3d","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"J.; and Hashimoto, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":72,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:90310608749765339a74772469a73f2dda04d4b18b256c002fb4cf14babdbce3","observation_id":"46449550-0623-440a-9d5f-4d692daf288b","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":73,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:7530d0ee00b3035254ee9204988a33e2a558950ea4a2fd3acf236f5775c4412a","observation_id":"2c1fa36a-7c0e-491c-adc0-1f1bd7112f99","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":74,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:f71284585c33236a8b26524202e23d1c61fc6961e21c85ee832a35e9ad893b15","observation_id":"dd3f7b1f-3530-4e63-9d0d-d08144803020","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"B.; Zhou, X.; Wang, Z","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":75,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:b09ed1216ed3a1e097e7cf7274b5210cc1015583ceb0fdcd19b0bb4b2efdbf5e","observation_id":"37b8dbaa-d815-4a3c-9dc7-456f72723009","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":76,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:100b5e6953c93a8f74b1be70af311a7f36c8f9fcbf1957569cdf825c56fc71ce","observation_id":"c6e46291-3a1b-4377-a734-216fcae0142c","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":77,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:c8bf30a13551ecf099d4697a2b99698a2c947daea422f12ad563387b6a987d28","observation_id":"7983a5ad-de6f-4bd7-b8f2-afa4e14bc58f","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":78,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:77baccccbd0473b2327b17708f4ff487fff31cef676044a15d3cb05f8c07ff69","observation_id":"e78239ba-96a5-47b4-b1ed-343b35b704b5","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":79,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:a4874aad12bb1a93c739b6650e271c54b28952df82829d89db618fe89522167b","observation_id":"c31aa93e-e587-405d-9b71-5111b64c087d","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":80,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:c586093e7d683de5c1c0907cd3f9442dd8ebe503323dec26fdd1f0465779932d","observation_id":"858dd7fe-1379-440d-821c-2fe453f6835c","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":81,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:1fd949768c80d4550f6ceb385c12d1ff19778098bad6507a858da649a7d93505","observation_id":"6b58eab6-7c0e-478e-8c4a-4a26e8ec50ec","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.15043","last_updated":"2023-12-20T20:48:57Z","snapshot_observed_at":"2026-07-06T15:59:23.019044Z","submitted_at":"2023-07-27T17:49:12Z","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.15043","snapshot_observed_at":"2026-07-14T03:26:15.676915Z","title":"Z.; and Fredrikson, M","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems","version":1},"reference_index":82,"source":"arxiv_source","source_observed_at":"2026-07-14T03:26:15.676915Z"},"links":{"cited_paper":"/paper/2307.15043","citing_paper":"/paper/2607.11751"},"observation_digest":"sha256:609ae588f2177f13616e676bfcf15045c614b51f2199aab6cd62a355f2ae47db","observation_id":"ea749d04-f998-4891-a294-fdc582982a01","resolution":{"observed_at":"2026-07-14T03:26:15.676915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.11751","last_updated":"2026-07-13T16:08:46Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T03:24:48.408797Z","submitted_at":"2026-07-13T16:08:46Z","title":"When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems"},"reference_resolution":{"displayed":78,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":78,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":78},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 78 of 78 outbound references and 0 inbound Pith citation observations for arXiv:2607.11751."}