Paper Citation Record · LEDGER

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense

As of 22 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2607.21824.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.21824 v1

Coverage vector

measured 34 of 34 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-01T06:40:05.441176Z

measured 34 of 34 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-22T06:32:14.747728+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

34 of 34 outbound references displayed

verified exact0
verified fuzzy0
unresolved33
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 1ca4b081-6830-411b-9770-2630a03a6a08 · outbound

This paper cites Formal Analysis and Supply Chain Security for Agentic AI Skills.arXiv preprint arXiv:2603.00195, 2026.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Formal Analysis and Supply Chain Security for Agentic AI Skills.arXiv preprint arXiv:2603.00195, 2026

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.218016Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f02079ae-9a42-4878-9d76-6c3aca0f938f · outbound

This paper cites Checking for Race Conditions in File Accesses.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Checking for Race Conditions in File Accesses

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.345716Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 20ac2ad7-3aae-4c6e-ac4a-6d4d174e5187 · outbound

This paper cites Are Aligned Neural Networks Adversarially Aligned? InAdvances in Neural Information Processing Systems, 2023.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Are Aligned Neural Networks Adversarially Aligned? InAdvances in Neural Information Processing Systems, 2023

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.484157Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 500ccea6-7aaf-4fe8-b460-f8c2cba8a492 · outbound

This paper cites RAILS: Verification-Native Clearing For Agentic Commerce.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense RAILS: Verification-Native Clearing For Agentic Commerce

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.596509Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c3f0e639-0266-480a-80b0-4423fd5c5fd3 · outbound

This paper cites AgentDojo: ADynamicEnvironmenttoEvaluatePromptInjection Attacks and Defenses for LLM Agents.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense AgentDojo: ADynamicEnvironmenttoEvaluatePromptInjection Attacks and Defenses for LLM Agents

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.762451Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7261f8c9-edc4-4406-9c0b-b19750ecd7a4 · outbound

This paper cites Infrastructure for the Agentic Web: Gap Analysis and Architecture from the Agentverse Platform.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Infrastructure for the Agentic Web: Gap Analysis and Architecture from the Agentverse Platform

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.894598Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f1dec875-7a3a-4d73-b58e-e61eb9d652c9 · outbound

This paper cites Coral Protocol: Open Infrastructure Connecting The Internet of Agents.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Coral Protocol: Open Infrastructure Connecting The Internet of Agents

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:01.984135Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7a591050-d91e-456d-a81b-5e11635c691e · outbound

This paper cites Agent Payments Protocol (AP2): Building a Secure and Interoperable Future for AI-Driven Payments.https://github.com/google-agentic-commerce/AP2, 2025.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Agent Payments Protocol (AP2): Building a Secure and Interoperable Future for AI-Driven Payments.https://github.com/google-agentic-commerce/AP2, 2025

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.137748Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 771f4d23-1792-4de7-931b-b4114b18a1e9 · outbound

This paper cites Not What You’ve Signed Up For: Compromising Real-World LLM- Integrated Applications with Indirect Prompt Injection.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Not What You’ve Signed Up For: Compromising Real-World LLM- Integrated Applications with Indirect Prompt Injection

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.313878Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2ac142e1-6130-45a5-8725-0a53b83f6831 · outbound

This paper cites Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Give Them an Inch and They Will Take a Mile:Understanding and Measuring Caller Identity Confusion in MCP-Based AI Systems

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.406801Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation de2bc0a7-ba13-4747-bc49-40a52fbec4ea · outbound

This paper cites The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey.arXiv preprint arXiv:2603.11088, 2026.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey.arXiv preprint arXiv:2603.11088, 2026

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.606345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6fe3fa7a-3a5c-4c85-9b35-7e15973d3b67 · outbound

This paper cites From Specification to Deployment: Empirical Evidence from a W3C VC + DID Trust Infrastructure for Autonomous Agents.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense From Specification to Deployment: Empirical Evidence from a W3C VC + DID Trust Infrastructure for Autonomous Agents

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.663438Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b3e9ba6c-4d6d-429e-8fe9-c36ceefba815 · outbound

This paper cites Who Governs the Machine? A Machine Identity Governance Taxonomy (MIGT) for AI Systems Operating Across Enterprise and Geopolitical Boundaries.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Who Governs the Machine? A Machine Identity Governance Taxonomy (MIGT) for AI Systems Operating Across Enterprise and Geopolitical Boundaries

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.850169Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bc6ecda3-3829-4892-b12c-037ed2044f1e · outbound

This paper cites Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2.arXiv preprint arXiv:2602.06345, 2026.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2.arXiv preprint arXiv:2602.06345, 2026

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:02.982305Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fdc14c37-7f77-44a4-9fe7-3a10cc24c7be · outbound

This paper cites A402: Binding Cryptocurrency Payments to Service Execution for Agentic Commerce.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense A402: Binding Cryptocurrency Payments to Service Execution for Agentic Commerce

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.095920Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f29171f9-2147-4039-a21e-a4ac05cc021f · outbound

This paper cites Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Mind the Gap: Time-of-Check to Time-of-Use Vulnerabilities in LLM-Enabled Agents

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.246144Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 046f499d-b895-4f70-bb19-593ae2b418ec · outbound

This paper cites Free-Riding the Agentic Web: A Systematic Security Analysis of x402 Payments.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Free-Riding the Agentic Web: A Systematic Security Analysis of x402 Payments

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.420296Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ef72035-d3b9-4574-a742-32663dd8bf2d · outbound

This paper cites Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.504298Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d6b30b7-61ef-4e46-9e26-2f25fd5a86fc · outbound

This paper cites Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.645279Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3fd7ff8a-5407-4024-80f2-de82c6b4696c · outbound

This paper cites Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.701789Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2d89cd2b-f2f6-4af1-abea-7cdfa2eb6bac · outbound

This paper cites Security Analysis of Agentic AI Com- munication Protocols: A Comparative Evaluation.ACM Transactions on AI Security and Privacy, 2025.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Security Analysis of Agentic AI Com- munication Protocols: A Comparative Evaluation.ACM Transactions on AI Security and Privacy, 2025

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.813181Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 08744510-f20d-4c37-8684-84e8c52b0109 · outbound

This paper cites SoK: Security of Autonomous LLM Agents in Agentic Commerce.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense SoK: Security of Autonomous LLM Agents in Agentic Commerce

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.894317Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6b684b1c-d64a-4f90-8586-666fed2030c3 · outbound

This paper cites Cryptographic Registry Provenance: Structural Defense Against Dependency Confusion in AI Package Ecosystems.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Cryptographic Registry Provenance: Structural Defense Against Dependency Confusion in AI Package Ecosystems

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:03.976295Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 258a4422-911c-4a33-8749-5c27b073efa9 · outbound

This paper cites OWASP Top 10 for Large Language Model Applications.https: //owasp.org/www-project-top-10-for-llm-applications/, 2025.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense OWASP Top 10 for Large Language Model Applications.https: //owasp.org/www-project-top-10-for-llm-applications/, 2025

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.063144Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0a32ce56-5e9a-4007-99c6-8e3845a35bd6 · outbound

This paper cites MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems.arXiv preprint arXiv:2603.18063, 2026.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense MCP-38: A Comprehensive Threat Taxonomy for Model Context Protocol Systems.arXiv preprint arXiv:2603.18063, 2026

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.184481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d431bb7f-adbb-4bae-8bdb-1873d98083a1 · outbound

This paper cites Prompt Injection Attack to Tool Selection in LLM Agents.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Prompt Injection Attack to Tool Selection in LLM Agents

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.348139Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01868e7b-59c9-4dad-bbaa-ef65efc74579 · outbound

This paper cites Before the Tool Call: Deterministic Pre-Action Authorization for Au- tonomous AI Agents.arXiv preprint arXiv:2603.20953, 2026.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Before the Tool Call: Deterministic Pre-Action Authorization for Au- tonomous AI Agents.arXiv preprint arXiv:2603.20953, 2026

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.466255Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dac5ed72-7366-4d8a-86c2-d1ba27b85182 · outbound

This paper cites Verifiable Credentials Data Model 2.0.https://www.w3.org/TR/ vc-data-model-2.0/, 2024.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Verifiable Credentials Data Model 2.0.https://www.w3.org/TR/ vc-data-model-2.0/, 2024

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.603090Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a6e4b10-b125-4629-a1b4-fc85cfde402a · outbound

This paper cites an unresolved cited work.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.722836Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c5c6f0e1-0b2e-4e38-849a-7b4b69663689 · outbound

This paper cites Wooldridge, Attila Bagoly, Jonathan J.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense Wooldridge, Attila Bagoly, Jonathan J

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:04.865157Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 14d6e910-31d5-4ba8-be7a-354f80c8d7c1 · outbound

This paper cites AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:05.033819Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 380b12e1-e1c5-4088-b511-b3dbddead718 · outbound

This paper cites SUDP: Secret-Use Delegation Protocol for Agentic Systems.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense SUDP: Secret-Use Delegation Protocol for Agentic Systems

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:05.156704Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6b5d295e-822e-4380-ac14-c1ca2879b0f9 · outbound

This paper cites research-key-2026.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense research-key-2026

Reference 33

Resolution: malformed identifier; no resolver link, observed 2026-08-01T06:40:05.324541Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ac83c8b5-8a19-41db-ae0d-b79c0f5d9f05 · outbound

This paper cites ts " : ts ,.

Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense ts " : ts ,

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-01T06:40:05.441176Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.