{"as_of":"2026-08-10T02:39:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:974199714d1b351d3ad2f259ccdb634bff7b3c991726c63e4320a738d11b0ea1","coverage":[{"denominator":99,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":99,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T22:44:02.715428Z","state":"measured"},{"denominator":99,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":99,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.15657/citation-record","integrity":"/paper/2607.15657/integrity","json":"/paper/2607.15657/citation-record.json","paper":"/paper/2607.15657"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:49.775455Z","title":"https://www.anthropic.com/claude/haiku","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:49.775455Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:dfea39ed61c69cbdc4afb14b6ff2b2afd04e0a4c146be732a63611c56b2c5acf","observation_id":"38b1a203-38b9-4ce2-a89d-9aaf8b0b2144","resolution":{"observed_at":"2026-08-01T22:43:49.775455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:49.875569Z","title":"https://docs.mem0.ai/open-source/ features/multimodal-support","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:49.875569Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:907270505a6f6de52a0dcb1734455459551b523b027762551ef8b58d50d1583f","observation_id":"f7937829-e0b0-44c1-898e-e12abfce2ac7","resolution":{"observed_at":"2026-08-01T22:43:49.875569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:50.103351Z","title":"https://platform","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.103351Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:35b3546c71b4095388ed9e08c198bdc21bf7c67a0a67b6f4effc0b13b43eaf1b","observation_id":"5a59654f-31b9-4795-ac2b-3b2c610fa8a5","resolution":{"observed_at":"2026-08-01T22:43:50.103351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02374","last_updated":"2024-09-25T04:50:38Z","snapshot_observed_at":"2026-07-06T16:27:22.878185Z","submitted_at":"2023-10-03T18:54:10Z","title":"Conversational Health Agents: A Personalized LLM-Powered Agent Framework","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.02374","snapshot_observed_at":"2026-08-01T22:43:50.235782Z","title":"Conversational health agents: A personalized llm-powered agent framework.arXiv preprint arXiv:2310.02374, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.235782Z"},"links":{"cited_paper":"/paper/2310.02374","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:dd591bde1b3c2240970f57a739feb6f6fbbd64d8a2ce96882da0cc240634e035","observation_id":"e03cf5c7-7caa-433f-a624-4315d67bf9c8","resolution":{"observed_at":"2026-08-01T22:43:50.235782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-01T22:43:50.384748Z","title":"Gpt-4 technical report.arXiv preprint arXiv:2303.08774, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.384748Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2835e6e9f75b44ff11ba9e774e09e74445b7bf7d6ed8006ea582f73ea734faaa","observation_id":"7add8b9f-752a-4a70-9709-849f3b8a79a6","resolution":{"observed_at":"2026-08-01T22:43:50.384748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10490","last_updated":"2023-10-03T17:03:10Z","snapshot_observed_at":"2026-08-08T22:08:37.768137Z","submitted_at":"2023-07-19T23:03:20Z","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10490","snapshot_observed_at":"2026-08-01T22:43:50.536410Z","title":"Abusing images and sounds for indirect instruction injection in multi-modal llms.arXiv preprint arXiv:2307.10490, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.536410Z"},"links":{"cited_paper":"/paper/2307.10490","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:adf23d3938d8b4d6ce3ced45f13b51c022421a2d74920f9fac3646cb21bfd648","observation_id":"3ca2b105-d4f9-4efc-a76a-fcd377754eae","resolution":{"observed_at":"2026-08-01T22:43:50.536410Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:50.715982Z","title":"Mem-gallery: Benchmarking multimodal long-term conversational memory for mllm agents.arXiv preprint arXiv:2601.03515, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.715982Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:843acecb2ba811f50158628f14cd80c7345cc037fbb93aafea448e538ff6d89c","observation_id":"990e17f7-2236-4117-965b-278602a64b65","resolution":{"observed_at":"2026-08-01T22:43:50.715982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1206.6389","last_updated":"2013-03-25T10:16:36Z","snapshot_observed_at":"2026-07-06T02:50:47.096675Z","submitted_at":"2012-06-27T19:59:59Z","title":"Poisoning Attacks against Support Vector Machines","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1206.6389","snapshot_observed_at":"2026-08-01T22:43:50.860169Z","title":"Poisoning attacks against support vector machines.arXiv preprint arXiv:1206.6389, 2012","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.860169Z"},"links":{"cited_paper":"/paper/1206.6389","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:26a1d293b7419f96501c8d58627924992f0f7ea0e849684d790767bd87f38a83","observation_id":"9adb1b44-27b8-4d36-9287-035166057637","resolution":{"observed_at":"2026-08-01T22:43:50.860169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:50.953670Z","title":"Improving language models by retrieving from trillions of tokens","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:50.953670Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:622432deba8cc31afce2e7cb06af436a547283d90afd04ba796cd2acbb4f2b76","observation_id":"b4c4d410-0c07-4262-920c-2e1f5887d76a","resolution":{"observed_at":"2026-08-01T22:43:50.953670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:51.101289Z","title":"Language models are few-shot learners.Advances in neural information processing systems, 33:1877–1901, 2020","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:51.101289Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:8c2460273feb6298558b7b89ac6293412d24433ffd863541ec9801dd2a199e12","observation_id":"1b175e89-7403-41a8-88b3-f669ae526121","resolution":{"observed_at":"2026-08-01T22:43:51.101289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:51.249499Z","title":"Telemem: Building long-term and multimodal memory for agentic ai.arXiv preprint arXiv:2601.06037, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:51.249499Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:e3576b10b7374ab9aaa3ea441ea98476be7686b6efd4267392945ed1662fa4c5","observation_id":"727f613c-420a-40a4-af4c-fa000300cfb9","resolution":{"observed_at":"2026-08-01T22:43:51.249499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:51.425344Z","title":"Less is more: Empowering gui agent with context- aware simplification","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:51.425344Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:fd46426b3e3c4840e99af88d3d1483f78486e40ac42295d1c00d1c2e1ff0c78c","observation_id":"4397a1d8-fde6-4a4c-b2b7-4d809a88e53f","resolution":{"observed_at":"2026-08-01T22:43:51.425344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:51.606967Z","title":"Sharegpt4v: Improving large multi-modal models with better captions","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:51.606967Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:bea5e1d8f4feb9e50f26a53eb319c9d3a299b4431b0d8846a54be65a3768dfab","observation_id":"1629e5c5-c8da-4809-ae6e-bd7ba7208904","resolution":{"observed_at":"2026-08-01T22:43:51.606967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:51.798205Z","title":"Murag: Multimodal retrieval-augmented generator for open question answering over images and text","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:51.798205Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:053a2addf75aaa0b153d8264da5b32b7ccd69a00cb2cb57a02c7a9312ccdcd9a","observation_id":"3e0f861e-4987-4643-b546-04063cae0c6b","resolution":{"observed_at":"2026-08-01T22:43:51.798205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-01T22:43:51.951268Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning.arXiv preprint arXiv:1712.05526, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:51.951268Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:b4b444f32fb5b177b924abf9ae873dae98f7fbccb45f8cceed01e594a7a59e5f","observation_id":"087ea2df-d931-4df0-9306-b07a3db4abba","resolution":{"observed_at":"2026-08-01T22:43:51.951268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:52.061753Z","title":"Agentpoison: Red- teaming llm agents via poisoning memory or knowledge bases.Advances in Neural Information Processing Systems, 37:130185–130213, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:52.061753Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2bc19594a7be798d83c2768b0de9cc40d689357e2c1a02033c1266bcb20fadbc","observation_id":"ce559b63-e6bb-43c4-bd28-b90b08d0978e","resolution":{"observed_at":"2026-08-01T22:43:52.061753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:52.207773Z","title":"Secure retrieval-augmented generation against poisoning attacks.arXiv preprint arXiv:2510.25025, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:52.207773Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:62c28cce8546f49a76460d446628c68db390d0245c616adace4f99416207c1ea","observation_id":"28014c44-e2ff-4800-9587-cd1a76723ea3","resolution":{"observed_at":"2026-08-01T22:43:52.207773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-02T07:32:11.339534Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-08-01T22:43:52.355091Z","title":"Mem0: Building production-ready ai agents with scalable long-term memory.arXiv preprint arXiv:2504.19413, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:52.355091Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:dfaf5cd0dc59b437012dbcd1ebfd2bb6e5c56104ab79229fc7f7c0c504379d0c","observation_id":"19af221d-42cf-41c5-a293-21f92955a164","resolution":{"observed_at":"2026-08-01T22:43:52.355091Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06261","last_updated":"2025-12-19T14:25:46Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-07-07T17:36:04Z","title":"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06261","snapshot_observed_at":"2026-08-01T22:43:52.579055Z","title":"Gemini 2.5: Pushing the frontier with advanced reasoning, multimodality, long context, and next generation agentic capabilities.arXiv preprint arXiv:2507.06261, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:52.579055Z"},"links":{"cited_paper":"/paper/2507.06261","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:5adfdda3dfbec1c838bda60cecf2d5cd69effbafe32e29b3833c5cc3f35beae3","observation_id":"4dbf4751-3e56-4bf1-9945-008691059362","resolution":{"observed_at":"2026-08-01T22:43:52.579055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:52.756719Z","title":"Towards large language models with human-like episodic memory.Trends in Cognitive Sciences, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:52.756719Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:7b370fcd6e79b7068ac9b076583490c7b5cb3f23bd5f2c471082f564f1535b99","observation_id":"19d4d584-ca94-44f1-843d-9d161b84fa34","resolution":{"observed_at":"2026-08-01T22:43:52.756719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:52.968777Z","title":"Memory injection attacks on llm agents via query-only interaction.arXiv preprint arXiv:2503.03704, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:52.968777Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:47f419755db97be63129add03e170084a337bd1dc0caa747348a0ec45a54df42","observation_id":"582295da-4054-4ee9-b02f-63d98f48d4e6","resolution":{"observed_at":"2026-08-01T22:43:52.968777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:53.118664Z","title":"How robust is google’s bard to adversarial image attacks? InR0-FoMo: Robustness of Few-shot and Zero-shot Learning in Large Foundation Models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:53.118664Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:8bff6a319bfad65287c5b4a4e93c6f390b347e5d8c3b769f5a7d2e26f9d77c20","observation_id":"ff72e48d-ba6f-46ac-bc33-b7c0e2aa56be","resolution":{"observed_at":"2026-08-01T22:43:53.118664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:53.294858Z","title":"Videoagent: A memory-augmented multimodal agent for video understanding","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:53.294858Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:05bc01ed1747b844d1a490b7b5e093a69b43147a567805938c0ae278bc5c199e","observation_id":"9bb1be26-578c-4c7f-be04-ec51e8cc1cfb","resolution":{"observed_at":"2026-08-01T22:43:53.294858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:53.395477Z","title":"Neural graph memory: A structured approach to long-term memory in multimodal agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:53.395477Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:f2d4d9a2ecff57752ea6585dbb4a7b961e7462b77af91bd4f171c8444545f9fd","observation_id":"fcb49e79-1ae3-45a2-bc9f-eda1b8de0f4f","resolution":{"observed_at":"2026-08-01T22:43:53.395477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:53.589183Z","title":"Embodied one-shot video recognition: Learning from actions of a virtual embodied agent","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:53.589183Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:44a1c2dcf45f668b29621d7a02a2e84a9bdeb02f1b164c3ac218fea683b81652","observation_id":"61feebc6-20e6-4ff4-a60e-5d9f42bd5056","resolution":{"observed_at":"2026-08-01T22:43:53.589183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.08640","last_updated":"2023-06-28T05:00:35Z","snapshot_observed_at":"2026-07-06T15:42:37.055739Z","submitted_at":"2023-06-14T17:12:56Z","title":"AssistGPT: A General Multi-modal Assistant that can Plan, Execute, Inspect, and Learn","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.08640","snapshot_observed_at":"2026-08-01T22:43:53.721865Z","title":"Assistgpt: A general multi-modal assistant that can plan, execute, inspect, and learn","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:53.721865Z"},"links":{"cited_paper":"/paper/2306.08640","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:9b46f9c7b4f805bb6350b379e9fb90047d5a2099785d9230e6b8746d7f4f6e9a","observation_id":"ee8420b1-643f-44e0-bd54-4f48be49a65d","resolution":{"observed_at":"2026-08-01T22:43:53.721865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:53.835822Z","title":"How to train long-context language models (effectively)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:53.835822Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:270b5d1947fec736fb318f60e2fb2c787e1529b43abdd2a4cf28bf53ec702d68","observation_id":"8d872dd4-5fa0-4870-9242-a493dcf3ff2c","resolution":{"observed_at":"2026-08-01T22:43:53.835822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-01T22:43:54.003126Z","title":"Retrieval-augmented generation for large language models: A survey.arXiv preprint arXiv:2312.10997, 2(1):32, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:54.003126Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:40f521798a4d37aa2955efec573466c73e9248e9b625aa2fd73a3bedefe83e65","observation_id":"02d8bdb7-b001-4c4d-b26f-c63021e17bd8","resolution":{"observed_at":"2026-08-01T22:43:54.003126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:54.181274Z","title":"Llm-based framework for administrative task automation in healthcare","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:54.181274Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:665a274281956dd8f839cd81b6410d9d6759163d420974c611d99f170d6a1961","observation_id":"58fa1046-3bbf-4acc-b641-53d1844e20ff","resolution":{"observed_at":"2026-08-01T22:43:54.181274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:54.419264Z","title":"Adversar- ial embedding: A robust and elusive steganography and watermarking technique","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:54.419264Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2160630c37483f7d078329cdbd25944d837a69291b4f84994ec3e206113a1b02","observation_id":"5ab21cc9-94a4-4454-9b78-80de7c3eb6f0","resolution":{"observed_at":"2026-08-01T22:43:54.419264Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-01T22:43:54.598904Z","title":"Explaining and harnessing adversar- ial examples.arXiv preprint arXiv:1412.6572, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:54.598904Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:760efee4567b01f5c524360e3c5e9ef428dd00a50bcc681a1d6971c2af27c772","observation_id":"f5506c88-4552-48cb-9e6e-409e3f1dc4a8","resolution":{"observed_at":"2026-08-01T22:43:54.598904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-01T22:43:54.813895Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain.arXiv preprint arXiv:1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:54.813895Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:f245892913ab9c4a76211a1c9f4dca71989c2c464efc2a3eddc5898b0c55b1b6","observation_id":"dc4883a0-e42c-430b-a840-3e3b5b90ce48","resolution":{"observed_at":"2026-08-01T22:43:54.813895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:55.037339Z","title":"Agent smith: A single image can jailbreak one million multimodal llm agents exponentially fast","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.037339Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:d95572eba8ab9a5df01f137538641f73560464f7208374c2306b9a1a217c1dfc","observation_id":"c5f0927b-d96b-497c-9bbe-0cef727d46cb","resolution":{"observed_at":"2026-08-01T22:43:55.037339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:55.154132Z","title":"Intelligent agents with llm-based process automation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.154132Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:42cbfe32157e8075048b7b0b62be2d6c3ba0a68c5f2ab53fe8cff2aadc12d13d","observation_id":"b9ab48a6-7586-4124-a0f2-1f95c4f7d62e","resolution":{"observed_at":"2026-08-01T22:43:55.154132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:55.244009Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.244009Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:fd2bed0f9e2a9ade51bdfecd169767d514847ecbcdab1c576e39da6bc312a04b","observation_id":"d3c5b7d7-0e37-48e9-86a5-71c9f09df98d","resolution":{"observed_at":"2026-08-01T22:43:55.244009Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.17832","last_updated":"2026-05-27T05:45:34Z","snapshot_observed_at":"2026-08-07T23:44:19.880010Z","submitted_at":"2025-02-25T04:23:59Z","title":"MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.17832","snapshot_observed_at":"2026-08-01T22:43:55.424632Z","title":"Mm-poisonrag: Disrupting multi- modal rag with local and global poisoning attacks.arXiv preprint arXiv:2502.17832, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.424632Z"},"links":{"cited_paper":"/paper/2502.17832","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:870562f026b9cac8fec3e9b162c35b2e8e8cc782c6c146d02c7b21f22091d559","observation_id":"090dde2d-9d14-4353-842a-454cde7aef6d","resolution":{"observed_at":"2026-08-01T22:43:55.424632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1704.05051","last_updated":"2017-07-20T05:31:16Z","snapshot_observed_at":"2026-07-06T05:38:07.634168Z","submitted_at":"2017-04-16T09:47:46Z","title":"Google's Cloud Vision API Is Not Robust To Noise","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.05051","snapshot_observed_at":"2026-08-01T22:43:55.550581Z","title":"Google’s cloud vision api is not robust to noise.arXiv preprint arXiv:1704.05051, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.550581Z"},"links":{"cited_paper":"/paper/1704.05051","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:e10b4fc5248167f4db168ff25865a09bcf4aca9bfe50e0b721cbd7e739ca4d7f","observation_id":"767bf909-9a8d-4336-b4c3-3f9c57096339","resolution":{"observed_at":"2026-08-01T22:43:55.550581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:55.677463Z","title":"Mem-pal: Towards memory-based personalized dialogue assistants for long- term user-agent interaction","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.677463Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:692eb486a53508292211910b05d5b22d735bbb12fdef6e60488d63630f3305cc","observation_id":"bb047c87-b989-452f-8817-fa2633b10652","resolution":{"observed_at":"2026-08-01T22:43:55.677463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:55.769149Z","title":"Augustus: An llm-driven multimodal agent system with contextualized user memory","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.769149Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:4289657202760e3325cddc710a4b7b9512138bb8fbf7264f43fc5323c9b7443d","observation_id":"a8cb7152-771c-459d-b273-b452c6d140bf","resolution":{"observed_at":"2026-08-01T22:43:55.769149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:55.899186Z","title":"Enabling chatbots with eyes and ears: An immersive multimodal conversation system for dynamic interactions","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:55.899186Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:a7ba31b5a20028ec88c0f3c613d900886260e970b7bbdda9d7ee8857fb23397b","observation_id":"cd04685d-d365-4b73-b248-4af8a127dcd0","resolution":{"observed_at":"2026-08-01T22:43:55.899186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:56.095943Z","title":"Adversarial attacks against closed-source mllms via feature optimal alignment","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.095943Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:aba9381b1043856e7c02e61acd49b78703fd07a53b66bde3ea4420f1610d647b","observation_id":"74439491-be2e-447e-980b-01a6df902a72","resolution":{"observed_at":"2026-08-01T22:43:56.095943Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:56.230079Z","title":"Adv-watermark: A novel watermark perturbation for adversarial examples","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.230079Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:e27f766b67a535349b83fe5a8bfba70095bfda5ccf47e6332b4bb3a80930d430","observation_id":"eb6585d4-35f3-4960-9747-f548682810a8","resolution":{"observed_at":"2026-08-01T22:43:56.230079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:56.390807Z","title":"Memory os of ai agent","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.390807Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:8f720014177c312cf58716d132c958aef738b41244b29355383f2b08b6ea3b69","observation_id":"eadc15d2-8455-49b3-8ca2-4359d4f2822c","resolution":{"observed_at":"2026-08-01T22:43:56.390807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:56.595464Z","title":"Dense passage retrieval for open-domain question answering","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.595464Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:085649bddf58ee16badfd7aa02c80608512e2abd203abd66684f034384720635","observation_id":"cbf9d039-5d9a-4722-9d94-47f0d009d1de","resolution":{"observed_at":"2026-08-01T22:43:56.595464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10852","last_updated":"2025-09-13T15:18:08Z","snapshot_observed_at":"2026-08-04T17:28:17.378416Z","submitted_at":"2025-09-13T15:18:08Z","title":"Pre-Storage Reasoning for Episodic Memory: Shifting Inference Burden to Memory for Personalized Dialogue","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.10852","snapshot_observed_at":"2026-08-01T22:43:56.714425Z","title":"Pre-storage reasoning for episodic memory: Shifting inference burden to memory for personalized dialogue","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.714425Z"},"links":{"cited_paper":"/paper/2509.10852","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:4722e2344c7e97c7daea2421be822f2c0a2dc86c1faabea4a53a3f3aea594e8e","observation_id":"5379bf80-9d66-486a-9660-ffded633323b","resolution":{"observed_at":"2026-08-01T22:43:56.714425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:56.806826Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks.Advances in neural information processing systems, 33:9459–9474, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.806826Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:d260f1e6686374fbd6d92c369714a5e63b2beb477f210c12ac27aed9c4cef4e0","observation_id":"f13245ee-edb3-438e-b832-4acd738e04b9","resolution":{"observed_at":"2026-08-01T22:43:56.806826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:56.910912Z","title":"Hello again! llm-powered personalized agent for long-term dialogue","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:56.910912Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:f7551de3a9c64b7f8d4b3861508595f2348657a7d14a9035503af4ed1afa38f4","observation_id":"9fccc3b5-a460-480c-b31f-e68eca610399","resolution":{"observed_at":"2026-08-01T22:43:56.910912Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.027454Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.027454Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:c9719aff4efb8a0a4c84b7782d6408ed4bf43d2c46fc6c8da35349db07bcac9a","observation_id":"a96edd34-f7c6-4e40-85ad-93352c3f8ed6","resolution":{"observed_at":"2026-08-01T22:43:57.027454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.097357Z","title":"Unsupervised corpus poisoning attacks in continuous space for dense retrieval","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.097357Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:762b9791ad3f114b29dafa5d2d3460ff98562b85efb9d41c41142cbd0fcc4055","observation_id":"3fc3d821-2c20-40ee-998c-b195fd12cce6","resolution":{"observed_at":"2026-08-01T22:43:57.097357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.210162Z","title":"A frustratingly simple yet highly effective attack baseline: Over 90% success rate against the strong black- box models of gpt-4.5/4o/o1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.210162Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:69fcb58e20cb00db4b35080a130aa33c075984a18415c24b97e1b65ed427803e","observation_id":"ecd47a7e-0714-4288-81fb-e6a1867e0047","resolution":{"observed_at":"2026-08-01T22:43:57.210162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.280197Z","title":"Retrieval augmented generation or long-context llms? a comprehensive study and hybrid approach","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.280197Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:bcdd01ac961ff32c4d8629dd416a435a72996c289796e7c81a5504936845f60a","observation_id":"10a0206f-e11b-4396-9cd5-6f4a6144e7aa","resolution":{"observed_at":"2026-08-01T22:43:57.280197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.03627","last_updated":"2026-06-02T03:13:58Z","snapshot_observed_at":"2026-08-03T18:48:56.892789Z","submitted_at":"2025-12-03T10:06:14Z","title":"MemVerse: Multimodal Memory for Lifelong Learning Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.03627","snapshot_observed_at":"2026-08-01T22:43:57.410172Z","title":"Memverse: Multimodal memory for lifelong learning agents.arXiv preprint arXiv:2512.03627, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.410172Z"},"links":{"cited_paper":"/paper/2512.03627","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:337e799519c4c34e317d8f1f871a8d0bde5190281a59e00d032a93c6b6e898ce","observation_id":"3e24f926-b884-42fb-8f89-1f5b4b7e9d47","resolution":{"observed_at":"2026-08-01T22:43:57.410172Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.596392Z","title":"Lost in the middle: How language models use long contexts.Transactions of the association for computational linguistics, 12:157–173, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.596392Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:6bf20530ce111a011a56933225698eee33d2e2d8f3bae8c3be510a4aac71b0c8","observation_id":"66610c55-2681-4485-baad-848f5857fcb0","resolution":{"observed_at":"2026-08-01T22:43:57.596392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.730661Z","title":"Seeing, listening, remembering, and reasoning: A multimodal agent with long-term memory","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.730661Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:99ff062cb283b6b3411d1c022ced07b846731ff7f48665403c6550e11f617d3b","observation_id":"5ce9d644-7769-455e-ba7e-2fea19728c3e","resolution":{"observed_at":"2026-08-01T22:43:57.730661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:57.867170Z","title":"Preemptive image robustification for protecting users against man-in-the-middle adversarial attacks","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:57.867170Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:e59f8d71bc48cd7941e1e2ccb5c544cd69dcb5e078470f6c38a505b69f94535b","observation_id":"b02fec42-90dc-40d5-a524-1791e19d2cab","resolution":{"observed_at":"2026-08-01T22:43:57.867170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.01613","last_updated":"2025-02-03T22:26:56Z","snapshot_observed_at":"2026-08-08T18:16:47.501613Z","submitted_at":"2024-02-02T18:23:18Z","title":"Nomic Embed: Training a Reproducible Long Context Text Embedder","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.01613","snapshot_observed_at":"2026-08-01T22:43:58.006066Z","title":"Nomic embed: Training a reproducible long context text embedder.arXiv preprint arXiv:2402.01613, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.006066Z"},"links":{"cited_paper":"/paper/2402.01613","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:3c4fafcf3857d4f48b8ad2901a0ac6b5a61ef07b0ef863257ff2435a6ed639f3","observation_id":"260e40b1-0fa8-40f2-8c85-a14c77ec1f8f","resolution":{"observed_at":"2026-08-01T22:43:58.006066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:58.205573Z","title":"Memgpt: towards llms as operating systems","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.205573Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:b218ff09d4cb2e385c0b12fac5a29aaec2ce9f5b0059b47f14cae4415f190c1f","observation_id":"c7d6c7f0-6029-4298-9d54-ee5e8fa8e6f9","resolution":{"observed_at":"2026-08-01T22:43:58.205573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:58.346946Z","title":"Generative agents: Interactive simulacra of human behavior","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.346946Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:df221d4ca8a0cc2c543fe8d6f75f14d1c9ce8c3465a7240d68523619835a01d0","observation_id":"8b320a2d-66ee-422e-aa57-d4df460c6d13","resolution":{"observed_at":"2026-08-01T22:43:58.346946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.16966","last_updated":"2026-04-18T11:15:37Z","snapshot_observed_at":"2026-07-15T23:17:44.749638Z","submitted_at":"2026-04-18T11:15:37Z","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.16966","snapshot_observed_at":"2026-08-01T22:43:58.485581Z","title":"Visual inception: Compromising long-term planning in agentic recommenders via multimodal memory poisoning.arXiv preprint arXiv:2604.16966, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.485581Z"},"links":{"cited_paper":"/paper/2604.16966","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:a2b22bd75374073395d091162da3685193e42677e7676e6e9e2965623b492a6b","observation_id":"25a9e9a0-bf40-4407-827b-6bf238e7f95f","resolution":{"observed_at":"2026-08-01T22:43:58.485581Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:58.688394Z","title":"Learning transferable visual models from natural language supervision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.688394Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:168b43174672c47e3a914e872f4c7384546645879c7f8471458519ed896dc7ab","observation_id":"4d6b13fe-af7f-43ff-a9a6-0b091f877478","resolution":{"observed_at":"2026-08-01T22:43:58.688394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:58.829876Z","title":"Meminsight: Autonomous memory augmentation for llm agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.829876Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:8964462f0e9b7369d09b1a35919a89597cdada9170cdbba5a20df67fb7e57e8e","observation_id":"f3de7750-ec69-4c74-b20a-c66243ef80c3","resolution":{"observed_at":"2026-08-01T22:43:58.829876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:58.975171Z","title":"Visual memory injection attacks for multi-turn conversations.arXiv preprint arXiv:2602.15927, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:58.975171Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:9b3985c131ba7772718d55cd5a83223a7fe7c74de8311d9777765b890c746ee1","observation_id":"abdd0f98-749a-40df-a599-5400062fbfd6","resolution":{"observed_at":"2026-08-01T22:43:58.975171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:59.143754Z","title":"Pmg: Personalized multimodal generation with large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:59.143754Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:6028d8f49786344cd14a57c628438637de46089fd67389a4e2b6de65c45b7e01","observation_id":"d14ee487-320e-40d1-aa41-71344f86d029","resolution":{"observed_at":"2026-08-01T22:43:59.143754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:59.230610Z","title":"One pic is all it takes: Poisoning visual document retrieval augmented generation with a single image.arXiv preprint arXiv:2504.02132, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:59.230610Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:3a06398713d8bb694e10e1fa6bbe88eb023ce1a426c8d4e8aaef9b8d681e905c","observation_id":"45d32b66-5063-4d21-b769-5c3fb087cdd9","resolution":{"observed_at":"2026-08-01T22:43:59.230610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:59.421225Z","title":"Scaling up memory for robotic control via experience retrieval","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:59.421225Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:4a3a28ad4a8d750955fcdca8c5b66e4f6fa4c76d0629a7854d942b64b1d1a46a","observation_id":"06a3bb75-cd20-4a26-bdde-d0413d20602c","resolution":{"observed_at":"2026-08-01T22:43:59.421225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:59.617460Z","title":"User- in-the-loop evaluation of multimodal llms for activity assistance","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:59.617460Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:d6e509a57252304a503d6b61f2dc604fca542dec5d1f1f0984f733f2c8c808ff","observation_id":"9ee297c4-a24a-4579-9bfd-488fdb8d870a","resolution":{"observed_at":"2026-08-01T22:43:59.617460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:43:59.758132Z","title":"Badagent: Inserting and activating backdoor attacks in llm agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:59.758132Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:a46a5c1f0b6c9d225550b5231d966b2cfc990ab388270b079cefa4558b73529e","observation_id":"41348a27-d579-45c5-8916-34e328294912","resolution":{"observed_at":"2026-08-01T22:43:59.758132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.07957","last_updated":"2025-07-10T17:40:11Z","snapshot_observed_at":"2026-08-06T11:34:56.054509Z","submitted_at":"2025-07-10T17:40:11Z","title":"MIRIX: Multi-Agent Memory System for LLM-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.07957","snapshot_observed_at":"2026-08-01T22:43:59.947633Z","title":"Mirix: Multi-agent memory system for llm-based agents.arXiv preprint arXiv:2507.07957, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-01T22:43:59.947633Z"},"links":{"cited_paper":"/paper/2507.07957","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:50cf52cc795d502d03f38a483b7d5336f3b2b2c16546364111ca29379ef74f8a","observation_id":"c88dbbf0-2854-4c93-98ee-8681f96ae242","resolution":{"observed_at":"2026-08-01T22:43:59.947633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.07682","last_updated":"2022-10-26T05:06:24Z","snapshot_observed_at":"2026-08-02T15:56:35.249569Z","submitted_at":"2022-06-15T17:32:01Z","title":"Emergent Abilities of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.07682","snapshot_observed_at":"2026-08-01T22:44:00.103207Z","title":"Emergent abilities of large language models.arXiv preprint arXiv:2206.07682, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:00.103207Z"},"links":{"cited_paper":"/paper/2206.07682","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:ec686b86f847fcde2427b36c12481a1a8d60d84e1e570b6393d376bd7fe94c8e","observation_id":"366e984c-f13d-4644-88bf-c11e8db1cfaf","resolution":{"observed_at":"2026-08-01T22:44:00.103207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2511.20857","last_updated":"2026-05-18T16:18:02Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-11-25T21:08:07Z","title":"Evo-Memory: Benchmarking LLM Agent Test-time Learning with Self-Evolving Memory","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.20857","snapshot_observed_at":"2026-08-01T22:44:00.259964Z","title":"Evo-memory: Benchmarking llm agent test-time learning with self-evolving memory.arXiv preprint arXiv:2511.20857, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:00.259964Z"},"links":{"cited_paper":"/paper/2511.20857","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:3e262fcb89483f81a6433c0dce6d4d9971664132dbf07caf06e3a77ede72478f","observation_id":"483f00e8-5f31-4023-a97f-b7c8743336dc","resolution":{"observed_at":"2026-08-01T22:44:00.259964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15965","last_updated":"2025-04-23T13:47:27Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-04-22T15:05:04Z","title":"From Human Memory to AI Memory: A Survey on Memory Mechanisms in the Era of LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15965","snapshot_observed_at":"2026-08-01T22:44:00.417933Z","title":"From human memory to ai memory: A survey on memory mechanisms in the era of llms.arXiv preprint arXiv:2504.15965, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:00.417933Z"},"links":{"cited_paper":"/paper/2504.15965","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:3c10fc02fbb23d1651bbbe8fcdb4a2d7256ef6f581e81ea855409418655f7f2e","observation_id":"5c5f5cfe-02fe-498d-8844-f068efddc627","resolution":{"observed_at":"2026-08-01T22:44:00.417933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:00.577784Z","title":"Sedm: Scalable self-evolving distributed memory for agents","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:00.577784Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:bc305cc04df4aaa2c090ecbc7c0bd6e21db09fcced54698b531ff31f849052dd","observation_id":"1becc9d5-88f2-4c84-b8a5-d23c4a6e5bb8","resolution":{"observed_at":"2026-08-01T22:44:00.577784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12110","last_updated":"2025-10-08T01:46:37Z","snapshot_observed_at":"2026-08-03T02:27:06.991396Z","submitted_at":"2025-02-17T18:36:14Z","title":"A-MEM: Agentic Memory for LLM Agents","version":11},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12110","snapshot_observed_at":"2026-08-01T22:44:00.794456Z","title":"A-mem: Agentic memory for llm agents.arXiv preprint arXiv:2502.12110, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:00.794456Z"},"links":{"cited_paper":"/paper/2502.12110","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:e526e18518b6d8efbeb4565ac564974c1fdca5505fab63071bdda3eba3ce506f","observation_id":"3610a5e4-4f6e-4a7e-8cd5-0a3e566f57a2","resolution":{"observed_at":"2026-08-01T22:44:00.794456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.027242Z","title":"Mmrc: A large-scale benchmark for understanding multimodal large language model in real-world conversation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.027242Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:3a4df9f74402eca7d34e663506331ef190ddbe86033bcfd7b000a46b660afa51","observation_id":"ef5ab980-9409-4011-b673-efdb83369c78","resolution":{"observed_at":"2026-08-01T22:44:01.027242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19828","last_updated":"2026-01-14T14:21:21Z","snapshot_observed_at":"2026-07-06T22:19:28.487854Z","submitted_at":"2025-08-27T12:26:55Z","title":"Memory-R1: Enhancing Large Language Model Agents to Manage and Utilize Memories via Reinforcement Learning","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.19828","snapshot_observed_at":"2026-08-01T22:44:01.188413Z","title":"Memory-r1: Enhancing large language model agents to manage and utilize memories via reinforcement learning.arXiv preprint arXiv:2508.19828, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.188413Z"},"links":{"cited_paper":"/paper/2508.19828","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:f2f34065ca778c9ed232f8872c001ad3bfe26913e409cc888c5080d0c6d805be","observation_id":"17f0f6bf-6682-412c-95b0-5ce63d8a30f4","resolution":{"observed_at":"2026-08-01T22:44:01.188413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.271414Z","title":"Transferable and stealthy adversarial attacks on large vision-language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.271414Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:194320753c95b623ed2392b78ceace47a12c6f67651d49a04fc37561a4d31da8","observation_id":"bd9f88be-21a0-4774-bfed-c9d1df12c2b9","resolution":{"observed_at":"2026-08-01T22:44:01.271414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07177","last_updated":"2025-04-13T12:27:56Z","snapshot_observed_at":"2026-08-09T06:47:11.559636Z","submitted_at":"2024-10-09T17:59:59Z","title":"MM-Ego: Towards Building Egocentric Multimodal LLMs for Video QA","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07177","snapshot_observed_at":"2026-08-01T22:44:01.350884Z","title":"Mm-ego: Towards building egocentric multimodal llms for video qa.arXiv preprint arXiv:2410.07177, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.350884Z"},"links":{"cited_paper":"/paper/2410.07177","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:221bf04c06b336ea98899b0f62ac8b73f07f62373a8b0cf208d35351f1eb86e3","observation_id":"687e6591-edcf-4b2a-b4e5-32cabf53b413","resolution":{"observed_at":"2026-08-01T22:44:01.350884Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.20734","last_updated":"2026-05-18T05:53:24Z","snapshot_observed_at":"2026-07-06T21:16:27.689435Z","submitted_at":"2025-04-29T13:18:58Z","title":"UniversalRAG: Retrieval-Augmented Generation over Corpora of Diverse Modalities and Granularities","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.20734","snapshot_observed_at":"2026-08-01T22:44:01.417601Z","title":"Univer- salrag: Retrieval-augmented generation over corpora of diverse modalities and granularities","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.417601Z"},"links":{"cited_paper":"/paper/2504.20734","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:83097828c4ccc014091ebfdebeea836b92ea05a75372174bc697ae10142faeef","observation_id":"1c154653-8b9c-4746-ad7a-680532a2bbfd","resolution":{"observed_at":"2026-08-01T22:44:01.417601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.502154Z","title":"Worldmm: Dynamic multimodal memory agent for long video reasoning.arXiv preprint arXiv:2512.02425, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.502154Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2942b7390bdec35fde42eab5a053f7f7765b17cc35a0bde0295a1204a9b167e3","observation_id":"6c73c4b1-bc81-488d-a037-72a754969429","resolution":{"observed_at":"2026-08-01T22:44:01.502154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.622624Z","title":"Poisoned- eye: Knowledge poisoning attack on retrieval-augmented generation based large vision-language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.622624Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2ffadcd9d551d2ada8b7d6d4bbf90f467528b707e0811ab2a04d3333ce36b302","observation_id":"e065e03d-e8a4-44b3-8f4a-121f0dde2029","resolution":{"observed_at":"2026-08-01T22:44:01.622624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.686554Z","title":"Mm-llms: Recent advances in multimodal large language models.Findings of the Association for Computational Linguistics: ACL 2024, pages 12401–12430, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.686554Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:f5157d166cf6897a6d2bdcdf9a5030d35827802faad4f671765dd39cc664f6fb","observation_id":"9a2453c2-8278-4416-8ff9-4dfbb43fa92b","resolution":{"observed_at":"2026-08-01T22:44:01.686554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.744972Z","title":"Anyattack: Towards large-scale self-supervised adversarial attacks on vision-language models","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.744972Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:bcb321358d31949bbba9fac0066d7e569d0c5c7997ba6973f2a046d4d2bebdd6","observation_id":"a956ee2f-710d-498c-a084-9ef9f7b6b7cd","resolution":{"observed_at":"2026-08-01T22:44:01.744972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.795056Z","title":"Mem2ego: Empowering vision-language models with global-to-ego memory for long-horizon embodied navigation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.795056Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:7ed6ed78d111a2366076d05e0a7b12dc6cd603e5b118a9644caa55c5f83d5116","observation_id":"257a52ab-9d87-4d1c-a077-fad32af0943e","resolution":{"observed_at":"2026-08-01T22:44:01.795056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16855","last_updated":"2025-04-01T08:48:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-22T04:40:24Z","title":"GME: Improving Universal Multimodal Retrieval by Multimodal LLMs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16855","snapshot_observed_at":"2026-08-01T22:44:01.844006Z","title":"Gme: improving universal multimodal retrieval by multimodal llms.arXiv preprint arXiv:2412.16855, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.844006Z"},"links":{"cited_paper":"/paper/2412.16855","citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2624222deba2a3bf9d2cc6ed63401a47cf56fa86e7d81a2959fa0de1b79a49ce","observation_id":"79c4f94f-a19c-442d-984b-fb0e47ff1882","resolution":{"observed_at":"2026-08-01T22:44:01.844006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.882628Z","title":"Memsim: A bayesian simulator for evaluating memory of llm-based personal assistants","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.882628Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:b72f34a14fad50bc0e4875310414fde544e171d5d5505b86e57f3a98521725eb","observation_id":"7e5ec0bf-999f-4e1f-8522-597a1ea74b62","resolution":{"observed_at":"2026-08-01T22:44:01.882628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.933025Z","title":"Memengine: A unified and modular library for developing advanced memory of llm-based agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.933025Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:2979298b6b4301d36b95d7eeb72a3125289a8febba3c76c5dda7bf1407d69436","observation_id":"91d3c006-ca25-4a98-8cbb-022eded0e4a1","resolution":{"observed_at":"2026-08-01T22:44:01.933025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:01.963367Z","title":"Prompt as triggers for backdoor attack: Examining the vulnerability in language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:01.963367Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:c10a152b2a373a10fbe80dacbcd939262eddddc68cd3cf02361ee78e27232950","observation_id":"12e4ffe0-f11f-43a5-a71b-3975a40a80ec","resolution":{"observed_at":"2026-08-01T22:44:01.963367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.025329Z","title":"On evaluating adversarial robustness of large vision-language models.Advances in Neural Information Processing Systems, 36:54111–54138, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.025329Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:e39d915883346a364844fcc1e5988b1cf1b3c0db8879fe0daa91e4fc6682a223","observation_id":"8de458cf-7872-4200-8b64-c8f22f6f39eb","resolution":{"observed_at":"2026-08-01T22:44:02.025329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.054788Z","title":"See and think: Embodied agent in virtual environment","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.054788Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:54ed08cfc6889c4e6035add4b7f69d0fc918883e6ec5994226ee3aa8c9e09542","observation_id":"5449bca7-2e39-4149-a57d-6f7b3e804943","resolution":{"observed_at":"2026-08-01T22:44:02.054788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.125641Z","title":"Poisoning retrieval corpora by injecting adversarial passages","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.125641Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:9a6c46bca2ee9e9e80ab16947201781bb912102bae4c7dea9c5dc44053597c22","observation_id":"f5ca2b42-26f7-43b3-926f-265df40ea793","resolution":{"observed_at":"2026-08-01T22:44:02.125641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.164987Z","title":"Here’s a photo from my recent activities. Could you briefly describe what you see?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.164987Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:de4af41811df0c8a6976cead734e96b8126455cde9dfe64ebe6898b8b393d03f","observation_id":"9f1c2def-824f-4a93-9551-e5dacf8bbda0","resolution":{"observed_at":"2026-08-01T22:44:02.164987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.209559Z","title":"The output is a plain-text image description that replaces the image in the pipeline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.209559Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:6a2478f179d3970c43aaff30a55220fb15701b02282a6ce26088e66902a75885","observation_id":"69524f65-69d3-433b-95b1-469bfa02e39e","resolution":{"observed_at":"2026-08-01T22:44:02.209559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.275164Z","title":"a document titled ‘HOW TO WRITE A HISTORY BOOK REVIEW’ by Paula Young","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.275164Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:7730e7556762330f6488918e5f728f02989f586379043155b319849510533d85","observation_id":"943f92b5-8e5a-4a26-8852-9dc02d064663","resolution":{"observed_at":"2026-08-01T22:44:02.275164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.322953Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.322953Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:4957eea7d6ca85905aab893ee723809db87e4b22e10a5386917b48c70ea79e5c","observation_id":"8f853853-396c-4f67-9cba-1349dcd68814","resolution":{"observed_at":"2026-08-01T22:44:02.322953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.377421Z","title":"•adversarial: replaceinput_imagewith the adversarially perturbed source image","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.377421Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:133a782b4242609f15c058fc4b71f3e290f0d4923a20d6b768ea08d2f98274a2","observation_id":"c633ffb0-7ce7-4a58-b072-3383c421b41a","resolution":{"observed_at":"2026-08-01T22:44:02.377421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.446145Z","title":"The user/assistanttextof every turn is left completely unchanged; only the three image-channel fields (input_image,image_caption,image_id) are modified","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.446145Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:007c2bba67bf80ad3e522c7ba33b538c3c37588a82c9118b5ffefc03b6c8e41a","observation_id":"c52ff98c-01d3-4e53-a659-c250cf7f577a","resolution":{"observed_at":"2026-08-01T22:44:02.446145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.539394Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.539394Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:13a90490d4fb96cd6e25f96ee828464bd41932f155920ae29cdc54450986899e","observation_id":"5716fdd9-9f51-4b8e-9fa9-d2d037502be8","resolution":{"observed_at":"2026-08-01T22:44:02.539394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.637271Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.637271Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:66b7022647712afc71a10551760d540f7375f80be0c4d4f23db90a186206be22","observation_id":"48384674-80df-4a01-8841-0acfd10499ee","resolution":{"observed_at":"2026-08-01T22:44:02.637271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T22:44:02.715428Z","title":"An injection audit file records every assignment: category, turn ID, image ID, source/target image paths, and the generated probe QA","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-01T22:44:02.715428Z"},"links":{"citing_paper":"/paper/2607.15657"},"observation_digest":"sha256:7b19fa9af856c55207c7ec980106bcbb027bf38639d30b1a4d091f23abf64fab","observation_id":"71719366-387c-4197-a178-fbf18446869b","resolution":{"observed_at":"2026-08-01T22:44:02.715428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.15657","last_updated":"2026-07-17T06:05:17Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T02:14:12.766320Z","submitted_at":"2026-07-17T06:05:17Z","title":"Do Agents Dream of False Memories? Black-box Visual Attacks on Long-term Memory in Multimodal AI Agents"},"reference_resolution":{"displayed":99,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":99,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":99},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 99 of 99 outbound references and 0 inbound Pith citation observations for arXiv:2607.15657."}