{"as_of":"2026-08-21T05:25:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6f83f1236635195527b9f5c5c1f88d342611f4c17814d195e5b114de4ff9338f","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T15:21:34.526438Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.18243/citation-record","integrity":"/paper/2607.18243/integrity","json":"/paper/2607.18243/citation-record.json","paper":"/paper/2607.18243"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.421389Z","title":"Gartner predicts over 40% of agentic AI projects will be canceled by end of 2027,","venue":null,"work_id":null,"year":2027},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.421389Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:42fc5d05ff6e1b3882997a542f75e61d171f65fb95e72426bfebf4109dfed3d9","observation_id":"0dfdd192-d198-404c-a5b7-0c98dc3a86c0","resolution":{"observed_at":"2026-08-02T15:21:34.421389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.426653Z","title":"Sok: The attack surface of agentic ai – tools, and autonomy,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.426653Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:3c2cfa66c14f24390a8c6ac0b3d3d2e1a3588a69f124c7490e601099c1ef9710","observation_id":"f6f8b905-0e96-4e8e-afae-6275e975d72f","resolution":{"observed_at":"2026-08-02T15:21:34.426653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.431349Z","title":"A new accident model for engineering safer systems,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.431349Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:794398641e10fbd6ef0d13fa67a9a8b1c21b1d69daef6d0e1b9dd29472e1b151","observation_id":"59532598-e895-47e7-8652-e8676d38000b","resolution":{"observed_at":"2026-08-02T15:21:34.431349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.436201Z","title":"STPA-SafeSec:Safetyandsecurityanalysisforcyber-physicalsystems,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.436201Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:9d97dfd0c0a7deb68b0aa33994cd1df70a044364801b1f450af02edaa3c25c82","observation_id":"c01e1243-998d-4d64-8cd3-46a8e8ae2cde","resolution":{"observed_at":"2026-08-02T15:21:34.436201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.440808Z","title":"Optimization of conditional value-at-risk,","venue":null,"work_id":null,"year":2000},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.440808Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:33fc4cfeeae02e98b9d235b08522aa5fc5aad9c22e58be8215e73d2bb35b2c65","observation_id":"3733ca23-b8ad-43af-97b1-0beb8a4f3368","resolution":{"observed_at":"2026-08-02T15:21:34.440808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.445516Z","title":"An adversarial risk analysis framework for cyber- security,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.445516Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:16f10715a4295e8d9f189a2b8d47c5bc5e36062a7a6b5d7d870e35ae1b919683","observation_id":"cbec004a-c3a9-4f1c-8106-a991236c9324","resolution":{"observed_at":"2026-08-02T15:21:34.445516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.450853Z","title":"Attack–defense trees,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.450853Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:275e7360334880b8d82742b8418cac8521045c9ebd282b12c3c807fed1c7113a","observation_id":"d4677830-2234-4f19-92f9-7ba6c99774bc","resolution":{"observed_at":"2026-08-02T15:21:34.450853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.03714","last_updated":"2023-10-05T17:37:25Z","snapshot_observed_at":"2026-08-04T05:21:05.846165Z","submitted_at":"2023-10-05T17:37:25Z","title":"DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelines","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.03714","snapshot_observed_at":"2026-08-02T15:21:34.454882Z","title":"DSPy: Compiling declarative language model calls into self-improving pipelines,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.454882Z"},"links":{"cited_paper":"/paper/2310.03714","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:ddd1d62aaa5bd607986da9350e232cf8c15c7704149e86e1402aa1d799a2a0e6","observation_id":"93a7d6a0-002b-492b-8e36-00f6c50bb79f","resolution":{"observed_at":"2026-08-02T15:21:34.454882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.08155","last_updated":"2023-10-03T20:47:10Z","snapshot_observed_at":"2026-08-08T22:28:26.004138Z","submitted_at":"2023-08-16T05:57:52Z","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.08155","snapshot_observed_at":"2026-08-02T15:21:34.459645Z","title":"AutoGen: Enabling next-gen LLM applica- tions via multi-agent conversation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.459645Z"},"links":{"cited_paper":"/paper/2308.08155","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:723755eda766bcd2561b2ef08ce9befd0ee1930ef61ef14d5e912d662c3835a1","observation_id":"54258d8b-581d-4cb5-8954-8fb782cff6fd","resolution":{"observed_at":"2026-08-02T15:21:34.459645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.00352","last_updated":"2024-11-01T14:36:52Z","snapshot_observed_at":"2026-08-12T16:02:21.969968Z","submitted_at":"2023-08-01T07:49:10Z","title":"MetaGPT: Meta Programming for A Multi-Agent Collaborative Framework","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.00352","snapshot_observed_at":"2026-08-02T15:21:34.464015Z","title":"MetaGPT: Meta programming for a multi-agent collaborative framework,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.464015Z"},"links":{"cited_paper":"/paper/2308.00352","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:3a737e4097daebd20100bed5bb18b81c6becaa564363e23a23163322222714b9","observation_id":"d55104db-1156-44ab-8e49-edc859258529","resolution":{"observed_at":"2026-08-02T15:21:34.464015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.13657","last_updated":"2025-10-26T23:25:18Z","snapshot_observed_at":"2026-08-16T06:37:17.259416Z","submitted_at":"2025-03-17T19:04:38Z","title":"Why Do Multi-Agent LLM Systems Fail?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.13657","snapshot_observed_at":"2026-08-02T15:21:34.468309Z","title":"Why do multi-agent LLM systems fail?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.468309Z"},"links":{"cited_paper":"/paper/2503.13657","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:3acfc206ed2f5d5893c288b613b9197af124038999d6d9fac00f60b9fda0ae76","observation_id":"c82a6a0a-6e97-4af6-93e7-8c68d4f082ec","resolution":{"observed_at":"2026-08-02T15:21:34.468309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.472980Z","title":"Coherent measures of risk,","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.472980Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:0939838d54cc3ca503ad234d1dfb26c174cabc3e12ec4bdbdd50cc94d99df278","observation_id":"e2a096eb-217e-4b31-a983-5a8dbe3379a6","resolution":{"observed_at":"2026-08-02T15:21:34.472980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.477348Z","title":"Estimationofsmallfailureprobabilitiesinhigh dimensions by subset simulation,","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.477348Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:90da43940fc56415a572d9baf7c7daae527e1288e2b21c0914b04325dd6dabbe","observation_id":"19445fc2-e8c4-40a8-92a7-907ff824644f","resolution":{"observed_at":"2026-08-02T15:21:34.477348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.481497Z","title":"Catastrophic cascade of failures in interdependent networks,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.481497Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:4827917255f15ae6b6e8de81c859afef6fdb0c5207b0901b1ccb1d429457b4c7","observation_id":"18caa138-fa8c-4170-8a2e-acd0acbb0ede","resolution":{"observed_at":"2026-08-02T15:21:34.481497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-08-13T11:09:53.274921Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-08-02T15:21:34.486117Z","title":"Agentspec: Customizable runtime enforcement for safe and reliable llm agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.486117Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:18f0865aeec20a2231818e20ac4f9c15559ca27ffd42ec51dcd5c5206ab7c4bf","observation_id":"f3888153-9b25-47aa-87e2-a73b63b22cd9","resolution":{"observed_at":"2026-08-02T15:21:34.486117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.490982Z","title":"Pro2guard: Proactive runtime enforcement of LLM agent safety via probabilistic model checking,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.490982Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:6e05a868d2830f3f1b5e8bad7674b0d7c3cdf62d93bc39aa3a78cc402a99ae0d","observation_id":"0398280a-df8d-4314-954a-87796ff33505","resolution":{"observed_at":"2026-08-02T15:21:34.490982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-20T10:01:00.326084Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-02T15:21:34.495095Z","title":"Defeating prompt injections by design,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.495095Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:0a24274db78ca6466f23915f8abec687fd55d5d8b7eaa9e47e02922d87e35d07","observation_id":"4a5e17fb-2fec-46f5-8960-c4c37092caf7","resolution":{"observed_at":"2026-08-02T15:21:34.495095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04960","last_updated":"2025-01-30T22:55:18Z","snapshot_observed_at":"2026-08-16T14:11:47.014972Z","submitted_at":"2024-03-08T00:02:30Z","title":"IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04960","snapshot_observed_at":"2026-08-02T15:21:34.499697Z","title":"Isolategpt: An execution isolation architecture for llm-based agentic systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.499697Z"},"links":{"cited_paper":"/paper/2403.04960","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:98c83ea0920bdd47286302219d98f2fcd3ef0afd9ad15204547ae694b96054fc","observation_id":"e8916d11-4b2e-4943-a39e-cd3d441f57eb","resolution":{"observed_at":"2026-08-02T15:21:34.499697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-08-17T13:35:14.591010Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-02T15:21:34.504534Z","title":"Progent: Programmable privilege control for llm agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.504534Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:9b8dc471cbf0e79811ff63db20a142c2adf08b405d64dc987dd6bdad019dc7d7","observation_id":"9d38891e-30ba-456a-993e-8c12dcf39d93","resolution":{"observed_at":"2026-08-02T15:21:34.504534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.13948","last_updated":"2025-06-02T22:38:38Z","snapshot_observed_at":"2026-08-19T17:06:33.547736Z","submitted_at":"2024-07-18T23:55:43Z","title":"Assurance of AI Systems From a Dependability Perspective","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.13948","snapshot_observed_at":"2026-08-02T15:21:34.508973Z","title":"Assurance of AI systems from a depend- ability perspective,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.508973Z"},"links":{"cited_paper":"/paper/2407.13948","citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:198783f54ea3c67fa0b21f74a4d60ba328b315927f092b9de68a001018928836","observation_id":"4c7ef342-f662-441c-a046-a24ed6d27b45","resolution":{"observed_at":"2026-08-02T15:21:34.508973Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.513701Z","title":"On the resilience of LLM-based multi-agent collaboration with faulty agents,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.513701Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:da6d37af6d6b431ac240299f9050623f6700922bc5465c141e2a942708fa00ba","observation_id":"6abe5ee2-95b0-430d-8bf8-1598e8f78d37","resolution":{"observed_at":"2026-08-02T15:21:34.513701Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.522292Z","title":"Securing LLM workloads with NIST AI RMF in the internet of robotic things,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.522292Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:f7376a51ce648f3e75c757654ed2a2206b30876587555d07aea72088ee5e809c","observation_id":"044c8124-566b-4a3f-88c3-cda760f47c7e","resolution":{"observed_at":"2026-08-02T15:21:34.522292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.526438Z","title":"Forge-bench: A threat-labeled dataset and digital twin framework for security evaluation of LLM-driven warehouse robots,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.526438Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:8d1e6fbd273caf852655ea50b35fef55c65f3f5c96d072a9415234b43519fe02","observation_id":"435a977e-9ed7-412a-910c-a01195f6a082","resolution":{"observed_at":"2026-08-02T15:21:34.526438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T15:21:34.518031Z","title":"26202–26226","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI","version":1},"reference_index":267,"source":"pdf_text","source_observed_at":"2026-08-02T15:21:34.518031Z"},"links":{"citing_paper":"/paper/2607.18243"},"observation_digest":"sha256:1678e37db322b1a9d5d18339716d503c9385d35f23a2098cc069549efabff5dd","observation_id":"7e19d699-e713-4330-b660-c3b30f8a819f","resolution":{"observed_at":"2026-08-02T15:21:34.518031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.18243","last_updated":"2026-04-28T23:40:24Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-20T04:37:13.644267Z","submitted_at":"2026-04-28T23:40:24Z","title":"From Agent Failure Paths to Quantified Residual Risk: A Compositional Framework for Resilient Agentic AI"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2607.18243."}