{"as_of":"2026-08-21T06:08:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3b737f8722d39b4110ab059f5933c7b92c36e93344ab927b92b58643625696a2","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T15:05:21.556705Z","state":"measured"},{"denominator":26,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":26,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.19433/citation-record","integrity":"/paper/2607.19433/integrity","json":"/paper/2607.19433/citation-record.json","paper":"/paper/2607.19433"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2302.04761","last_updated":"2023-02-09T16:49:57Z","snapshot_observed_at":"2026-07-06T14:50:07.491434Z","submitted_at":"2023-02-09T16:49:57Z","title":"Toolformer: Language Models Can Teach Themselves to Use Tools","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.04761","snapshot_observed_at":"2026-08-01T15:05:18.271723Z","title":"Toolformer: Language models can teach themselves to use tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.271723Z"},"links":{"cited_paper":"/paper/2302.04761","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:508b7582f61d22c6b876834ae3171151f512aafd88b859c82ebe20aae6195c47","observation_id":"387f6590-271f-417d-a891-d031e8c3d4ec","resolution":{"observed_at":"2026-08-01T15:05:18.271723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.03629","last_updated":"2023-03-10T01:00:17Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-10-06T01:00:32Z","title":"ReAct: Synergizing Reasoning and Acting in Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.03629","snapshot_observed_at":"2026-08-01T15:05:18.349712Z","title":"ReAct: Synergizing reasoning and acting in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.349712Z"},"links":{"cited_paper":"/paper/2210.03629","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:2532e2489f1adacf9144bd9fa45c73d69af7aef61bfacc7ff1a008938ce490bb","observation_id":"3f4b2d42-89a2-4bd2-9810-e4d03ba365bb","resolution":{"observed_at":"2026-08-01T15:05:18.349712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:18.409490Z","title":"Generative agents: Interactive simulacra of human behavior,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.409490Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:51542103812a5397e8c79f8956e2043cb98b7a1f3d9916fda799f98dc414bd85","observation_id":"c7ae3d69-fd38-49a5-b30d-106000c05d88","resolution":{"observed_at":"2026-08-01T15:05:18.409490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08560","last_updated":"2024-02-12T18:59:46Z","snapshot_observed_at":"2026-08-19T03:45:55.054912Z","submitted_at":"2023-10-12T17:51:32Z","title":"MemGPT: Towards LLMs as Operating Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08560","snapshot_observed_at":"2026-08-01T15:05:18.491143Z","title":"MemGPT: Towards LLMs as operating systems,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.491143Z"},"links":{"cited_paper":"/paper/2310.08560","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:a4a09f784ab712bf6d6d7e04af4ba481c03b905eb9c303083f83ac08172bc992","observation_id":"9a9fefd7-6ce8-4dfb-9b79-5fd7a034e6d4","resolution":{"observed_at":"2026-08-01T15:05:18.491143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-13T16:55:46.498156Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-01T15:05:18.577118Z","title":"V oyager: An open-ended embodied agent with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.577118Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:79365f8914f16c05c685a74587d123f459d8bde48dc6b73940875445072caacb","observation_id":"2738f9d0-18af-46bb-b6b6-b54d4bb91579","resolution":{"observed_at":"2026-08-01T15:05:18.577118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12784","last_updated":"2024-07-17T17:59:47Z","snapshot_observed_at":"2026-08-17T20:18:11.308761Z","submitted_at":"2024-07-17T17:59:47Z","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12784","snapshot_observed_at":"2026-08-01T15:05:18.672207Z","title":"AgentPoison: Red-teaming LLM agents via poisoning memory or knowledge bases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.672207Z"},"links":{"cited_paper":"/paper/2407.12784","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:085d710a6f37f84d58861352eacf7daa9e6878e2158dc399a706ea45037866e8","observation_id":"f539b97a-aa33-4733-be60-33718a89f0bb","resolution":{"observed_at":"2026-08-01T15:05:18.672207Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1609/aaai.v39i1","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:08:29.594275Z","title":"Portcullis: A scalable and verifiable privacy gateway for large language models,","venue":null,"work_id":"120bd34e-3ef0-46bd-8e86-eef5df149027","year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.796448Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:bc1cf218842a1e97549a72d522714cf209e48ed8eafebbe19185cc27bf89cb88","observation_id":"b77c8d91-9467-4ad7-8e03-a12259e24fef","resolution":{"observed_at":"2026-08-01T15:08:29.671575Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:18.958640Z","title":"A practical memory injection attack (MINJA) against LLM agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:18.958640Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:2045bbd2c4058d598cba8a73143c8a53e5993bfd6b7a772e89e12a7bcca28970","observation_id":"56bfe2eb-8ff4-4f73-a846-2a9cc5cca557","resolution":{"observed_at":"2026-08-01T15:05:18.958640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:19.088649Z","title":"MemoryGraft: Persistent compromise of LLM agents via poisoned RAG stores,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.088649Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:e84dc4e7f1458ac810d1e4ce140fc3a9028f6dba19f7f1b0e11096a3472fb9d0","observation_id":"57817ecf-41e0-492f-8f00-ac73d5ef9c1e","resolution":{"observed_at":"2026-08-01T15:05:19.088649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-08-15T14:10:05.296241Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-08-01T15:05:19.200461Z","title":"Sleeper agents: Training deceptive LLMs that persist through safety training,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.200461Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:4e3ed4acc1586a341beb89f4b4350d52aca9fdaf9b4f87f7daddea2d0a6d9963","observation_id":"a5f0e0c8-9843-4f84-b660-f86570905148","resolution":{"observed_at":"2026-08-01T15:05:19.200461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.03097","doi":"10.48550/arxiv.2512.03097","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Many-to-one adversarial consensus: Exposing multi-agent collusion risks in AI-based healthcare,","venue":"ArXiv.org","work_id":"23923e01-c056-4200-8669-825071eb480c","year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.362480Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:1c6811c1ccb9262c859a6cc0d89400139c4f24af28bc74711d1a09dfba39601e","observation_id":"bbac8c23-5a3e-4800-8902-744b1c05b3de","resolution":{"observed_at":"2026-08-01T15:08:29.454134Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.10540","last_updated":"2025-09-06T04:06:01Z","snapshot_observed_at":"2026-08-15T16:20:14.110461Z","submitted_at":"2025-09-06T04:06:01Z","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.10540","snapshot_observed_at":"2026-08-01T15:05:19.509390Z","title":"EchoLeak: The first real-world zero-click prompt injection exploit in a production LLM system,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.509390Z"},"links":{"cited_paper":"/paper/2509.10540","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:44779aaa6cf65f61658f1b0471454c30dc9721ee2f9a5eb6373c83dc969e3cfc","observation_id":"3bc24c1e-11f6-4de4-b241-7937b170c3f7","resolution":{"observed_at":"2026-08-01T15:05:19.509390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.12173","last_updated":"2023-05-05T14:26:17Z","snapshot_observed_at":"2026-08-12T14:45:22.117576Z","submitted_at":"2023-02-23T17:14:38Z","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.12173","snapshot_observed_at":"2026-08-01T15:05:19.657830Z","title":"Not what you’ve signed up for: Compromising real- world LLM-integrated applications with indirect prompt injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.657830Z"},"links":{"cited_paper":"/paper/2302.12173","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:0091139d22d5d8895ed1367f934e268cd6fa4a8787296a03f262ed88638a9552","observation_id":"505ad013-7f23-484f-9bda-a233d4e14e17","resolution":{"observed_at":"2026-08-01T15:05:19.657830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:19.760398Z","title":"Mind2Web: Towards a generalist agent for the web,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.760398Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:a23ae3a143a649d91f47afa4c79bde5d1d5ce63f43e6caa21ede22d64ef13024","observation_id":"27e7ed87-d93a-463c-a91f-eacdb41cd026","resolution":{"observed_at":"2026-08-01T15:05:19.760398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.16789","last_updated":"2023-10-03T14:45:48Z","snapshot_observed_at":"2026-08-16T04:18:30.717622Z","submitted_at":"2023-07-31T15:56:53Z","title":"ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.16789","snapshot_observed_at":"2026-08-01T15:05:19.842069Z","title":"ToolLLM: Facilitating large language models to master 16000+ real-world APIs,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.842069Z"},"links":{"cited_paper":"/paper/2307.16789","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:10a6150aad017d505d08153b3bf958a7448476e26158d5a2228d5c95bdbcbaf0","observation_id":"ec2fb475-28b2-491f-ba41-0be0b89c2614","resolution":{"observed_at":"2026-08-01T15:05:19.842069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:19.986478Z","title":"World of workflows: A benchmark for enterprise agent reliability,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:19.986478Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:27d820cb830ed0b97e59ac0252d50fdacec80d97dbf992f2f5e2987b495fc90f","observation_id":"b5a8ba56-a0b2-4b46-a5c0-101450d055eb","resolution":{"observed_at":"2026-08-01T15:05:19.986478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.03688","last_updated":"2025-10-04T03:54:18Z","snapshot_observed_at":"2026-08-20T10:21:12.032735Z","submitted_at":"2023-08-07T16:08:11Z","title":"AgentBench: Evaluating LLMs as Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.03688","snapshot_observed_at":"2026-08-01T15:05:20.154953Z","title":"AgentBench: Evaluating LLMs as agents,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.154953Z"},"links":{"cited_paper":"/paper/2308.03688","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:93f8b4addf84bcc709be188970353342e422190d091196327bfce204fd23a993","observation_id":"998a80f3-dc34-4e61-aded-6ff2e6477b06","resolution":{"observed_at":"2026-08-01T15:05:20.154953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:20.299478Z","title":"Flow-of-Action: SOP Enhanced LLM-Based Multi-Agent System for Root Cause Analysis,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.299478Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:62520d0c26ff693dd5e01014cba50b76ab3b397744ea4b317d7fa676e059c1b4","observation_id":"4e45b31e-ba8e-4ec8-90d7-a049dad508d1","resolution":{"observed_at":"2026-08-01T15:05:20.299478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-01T15:05:20.501360Z","title":"AgentDoG: A diagnostic guardrail framework for agentic safety,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.501360Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:5382e8d71b4742e8e4bd70f312bbed3b56ba2161657de6a9201d8bcc2299ceff","observation_id":"632580ff-ae0b-4a8b-9b6d-f20f6a855a4a","resolution":{"observed_at":"2026-08-01T15:05:20.501360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:20.638883Z","title":"Agent-C: Enforcing temporal constraints for LLM agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.638883Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:081d25015d7029654654d284f7dd7a001235d6cbed22d16d09549b7152ea6aea","observation_id":"d20ede70-aaba-4674-9906-a5726cc61acf","resolution":{"observed_at":"2026-08-01T15:05:20.638883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-08-13T11:09:53.274921Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-08-01T15:05:20.767669Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.767669Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:c4fd0959ff784f906650d7128fd5ecf2d68e2b25c48165629d1031d2f1c8d8f5","observation_id":"b33ba695-d87d-4f58-8ec6-4beeaca55500","resolution":{"observed_at":"2026-08-01T15:05:20.767669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:20.931588Z","title":"A-MemGuard: A proactive defense framework against memory injection attacks on LLM agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:20.931588Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:111e1ded67f9392ba5a7d3df6f6bf6a957f6aa0cd4797b60eb0543af01b475ea","observation_id":"b6304b3c-d15d-43c0-a168-41fb48666d2f","resolution":{"observed_at":"2026-08-01T15:05:20.931588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:21.037533Z","title":"Confidential LLM inference: Performance and cost,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:21.037533Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:92d0842d7587ae3a160305f42493e86282c5f1bada0b34c559691cbdf90cf31a","observation_id":"41ded9ec-28dc-4a10-b592-4c97e2f539bc","resolution":{"observed_at":"2026-08-01T15:05:21.037533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:21.172287Z","title":"Geometric dynamics of agentic loops,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:21.172287Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:7930044ca3917ee47b8591d2fbc426d32a0932db0e045097b64b9c63cd78d18b","observation_id":"b47bd726-fcca-4de7-ad74-7b4aab047f23","resolution":{"observed_at":"2026-08-01T15:05:21.172287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.16199","last_updated":"2026-04-30T16:16:52Z","snapshot_observed_at":"2026-08-18T19:31:21.023876Z","submitted_at":"2026-01-22T18:51:13Z","title":"PAL*M: Property Attestation for Large Generative Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.16199","snapshot_observed_at":"2026-08-01T15:05:21.391311Z","title":"PAL*M: Property attestation for large gen- erative models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:21.391311Z"},"links":{"cited_paper":"/paper/2601.16199","citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:14a8a6fd5ec89c6231398421e7e1168e834178c2c89586f07f9b6818b79a0d5f","observation_id":"94fe26af-d272-418c-8955-6719cc22b742","resolution":{"observed_at":"2026-08-01T15:05:21.391311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T15:05:21.556705Z","title":"MemTrust: A zero-trust architecture for unified AI memory system,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T15:05:21.556705Z"},"links":{"citing_paper":"/paper/2607.19433"},"observation_digest":"sha256:aff4cfd270346b561ef00e67b7f920c341f89c08f1933f40c2e24555ed5c5849","observation_id":"8e2331cb-8506-4706-b13c-4045654ab88e","resolution":{"observed_at":"2026-08-01T15:05:21.556705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.19433","last_updated":"2026-07-20T22:50:33Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-14T15:43:17.365888Z","submitted_at":"2026-07-20T22:50:33Z","title":"The Chronos Vulnerability: A Taxonomy of Temporal Persistence and Memory-Based Deception in Agentic AI"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 0 inbound Pith citation observations for arXiv:2607.19433."}