{"as_of":"2026-08-11T19:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:83ab2a55daa939364d6d3df31cfab01f9d06b3170fff5e9c0adc5e28120851db","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T10:25:18.320400Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:56:02.846369Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-11T05:56:03.000496Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"cited_work":{"arxiv_id":"2607.24625","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.24625","snapshot_observed_at":"2026-08-11T05:56:03.000496Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","venue":"cs.CR","work_id":"751daa42-cd5b-4b9d-a0da-9a9dde8348bf","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T19:20:32.096768Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.846369Z"},"links":{"cited_paper":"/paper/2607.24625","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:282a8c77bee7ba8669cfa2b9dcd102b5fab4fef162382fafc2082680f75f288d","observation_id":"d2cbe207-0591-4469-8827-3455c6f9ad2d","resolution":{"observed_at":"2026-08-11T05:56:03.004575Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2607.24625/citation-record","integrity":"/paper/2607.24625/integrity","json":"/paper/2607.24625/citation-record.json","paper":"/paper/2607.24625"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:14.536419Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.536419Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:6648846bf17a8dca71f1e67febd79de60c25218328d02641aab242ff70d2b683","observation_id":"736822d7-c69a-44ca-9ea3-805803bb5e7e","resolution":{"observed_at":"2026-07-31T10:25:14.536419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:14.606476Z","title":"2024.Model Context Protocol (MCP) Specification","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.606476Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:c6e977f0a741395807b102ca95c3968687f50b55f9da10b972ea4fe072357fe0","observation_id":"d87beb57-7f71-4980-b6e4-789d7f411574","resolution":{"observed_at":"2026-07-31T10:25:14.606476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:14.676618Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.676618Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:60d140f0b75f4665fa05b47ab44d0aa809a53100a525ba3b223d2cc87b9ffc79","observation_id":"857c00f1-4968-4ca6-844b-88b1788e3d4a","resolution":{"observed_at":"2026-07-31T10:25:14.676618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:14.746548Z","title":"Taylor, Krishnamurthy Dvijotham, and Alexandre Lacoste","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.746548Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:da4b907e22574a619616a9a7f5740ff095f28a310e77d8945dd8b99c4b4be9ee","observation_id":"2519cf88-6cba-42ae-adde-fd636024b422","resolution":{"observed_at":"2026-07-31T10:25:14.746548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:14.862930Z","title":"1967.Lattice Theory(3rd ed.)","venue":null,"work_id":null,"year":1967},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.862930Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:36f11fe5d930181c8c68293edde940c9c88953750a32ee64a408234fceaababd","observation_id":"25c40781-4fcc-4f19-a997-3e13f186ce8e","resolution":{"observed_at":"2026-07-31T10:25:14.862930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.23374","last_updated":"2026-04-25T16:39:16Z","snapshot_observed_at":"2026-07-06T23:09:38.799345Z","submitted_at":"2026-04-25T16:39:16Z","title":"Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.23374","snapshot_observed_at":"2026-07-31T10:25:14.995480Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:14.995480Z"},"links":{"cited_paper":"/paper/2604.23374","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:97d98c8b4b3328d8d0356be7985f6e00c604f2e0cf4df6a8166f1e3e1d2ce1f7","observation_id":"1e0bfb9d-1b50-4387-ad16-94de1ef3ec59","resolution":{"observed_at":"2026-07-31T10:25:14.995480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/1273463","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"4e903171-c90b-4f31-a0e0-1ec10a897ce3","year":2007},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.157285Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:ad26325b125c2851437f065935d35ab60d04e8477536a2d4eb9684097a5b03da","observation_id":"8e7fb7b4-c599-4a38-809c-161b018c303c","resolution":{"observed_at":"2026-07-31T10:26:29.700292Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23643","last_updated":"2025-09-03T12:30:47Z","snapshot_observed_at":"2026-07-06T21:33:02.686798Z","submitted_at":"2025-05-29T16:50:41Z","title":"Securing AI Agents with Information-Flow Control","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23643","snapshot_observed_at":"2026-07-31T10:25:15.305550Z","title":"2025.Securing AI Agents with Information-Flow Control","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.305550Z"},"links":{"cited_paper":"/paper/2505.23643","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:bc9a0d99800e895fbaf182e1b756e222c24c5ae1764e801656b043c90f87ce5c","observation_id":"354b14fb-3376-4666-8858-1a4c320b02e1","resolution":{"observed_at":"2026-07-31T10:25:15.305550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-07-31T10:25:15.401606Z","title":"2025.Defeating Prompt Injections by Design","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.401606Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:e978f7879a551ac71d06185fd4709022f84530c77e138dcb70f6ff0a13d763c9","observation_id":"66f96a41-42e7-4e6f-9463-f66309621e2a","resolution":{"observed_at":"2026-07-31T10:25:15.401606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-07-31T10:25:15.498142Z","title":"2024.AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.498142Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:66237a1ae7977e4b4448d4941bc012321a276e3233c94129b78ba07fdad1135b","observation_id":"ed1c6a41-01bc-413f-afda-f1ea1b4c21b3","resolution":{"observed_at":"2026-07-31T10:25:15.498142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:15.718788Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.718788Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:fb5560064c30f6a9339ea2d732f83aa6dfb563564df18c922844108e1d5ecf9e","observation_id":"decf9f36-901e-4d08-b6f0-1fda37fdbdc1","resolution":{"observed_at":"2026-07-31T10:25:15.718788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:15.855376Z","title":null,"venue":null,"work_id":null,"year":1976},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.855376Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:d83b73fe65ce23968e305c7c4ad2ef0175ed9b52755db5a081d2dbef06eeb50c","observation_id":"2ef4a230-9c7a-42b9-8f3f-8a24eb29acf8","resolution":{"observed_at":"2026-07-31T10:25:15.855376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.032776Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.032776Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:018c2f0210445d961b4991e0b19825919292f7b233c1d4b528e03a71a68253e3","observation_id":"72af4b8f-6553-40bf-942e-52e8c9dd0279","resolution":{"observed_at":"2026-07-31T10:25:16.032776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.22781","last_updated":"2026-06-08T12:58:55Z","snapshot_observed_at":"2026-08-03T17:11:27.377640Z","submitted_at":"2026-05-21T17:36:17Z","title":"DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.22781","snapshot_observed_at":"2026-07-31T10:25:16.109445Z","title":"2026.DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.109445Z"},"links":{"cited_paper":"/paper/2605.22781","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:c36ab7aee71fa2d8f174aac84a87919f6a3964d5523008700eb6538e076e3fe0","observation_id":"2af2e458-1cdf-4e87-b418-3e3052e0dc33","resolution":{"observed_at":"2026-07-31T10:25:16.109445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/csf.2013.22","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"e59bb8a3-78b1-45ed-b779-4cf51880f52a","year":2013},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.182441Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:01e92fbc86020b7181d3df16f11be245caf024b431a9c4fed33c3c009a6d2609","observation_id":"fad9a5c7-0d2c-44d0-877b-c75d60c18138","resolution":{"observed_at":"2026-07-31T10:26:29.574208Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.280411Z","title":"Goguen and José Meseguer","venue":null,"work_id":null,"year":1982},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.280411Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:49ae9a39dab3b33f9fbb13f781abbe8af3db3017e063e08ad813f9c0d0941fec","observation_id":"28744486-3702-4cd5-857e-e4c991e63070","resolution":{"observed_at":"2026-07-31T10:25:16.280411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.487235Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.487235Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:dee62e31591e737891c0154f780d6f645452af400d2d72c67c7b57acc45c1949","observation_id":"a5409f0a-e91b-48ee-be08-7ab2f571cdcd","resolution":{"observed_at":"2026-07-31T10:25:16.487235Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.568654Z","title":"2026.SMCP: Secure Model Context Protocol","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.568654Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:533754a594dc662a33b9345df3459af236e8ca32f4aa27b2c2aa90b5531bcb26","observation_id":"52fc861f-2bb0-4df9-b160-3412bb430bff","resolution":{"observed_at":"2026-07-31T10:25:16.568654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05566","last_updated":"2024-01-17T20:26:01Z","snapshot_observed_at":"2026-07-06T17:14:03.152949Z","submitted_at":"2024-01-10T22:14:35Z","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05566","snapshot_observed_at":"2026-07-31T10:25:16.638678Z","title":"Ziegler, Tim Maxwell, Nicholas Cheng, Adam Jermyn, Amanda Sharma, Shauna Johnston, Rohit Shah, Nelson Elhage, Samuel R","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.638678Z"},"links":{"cited_paper":"/paper/2401.05566","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:5af4992cdd8523503eed4876fe1de8157022098514d0546e52e1dcf569437e06","observation_id":"f641e18b-e95a-476b-b228-103f8655fd41","resolution":{"observed_at":"2026-07-31T10:25:16.638678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-07-31T10:25:16.690688Z","title":"2023.Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.690688Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:fb9a6e6c83efb95888474f05c8f7692f33e509101ac1eba5f4f741e4fe7afc31","observation_id":"d1b40f3a-30c9-4ca8-ab6a-d6a53d17688b","resolution":{"observed_at":"2026-07-31T10:25:16.690688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.773463Z","title":"Jensen and William H","venue":null,"work_id":null,"year":1976},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.773463Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:f74026613bdfc52ed28bd2b359ac5f91d31a505ddb6023a52db94e592444d1b3","observation_id":"8cc205a5-3ff6-452b-8f9a-b520c1e717fb","resolution":{"observed_at":"2026-07-31T10:25:16.773463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.846874Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.846874Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:851576db1f5760e72b6b4d80c0950cd6b2c6bee4c91b528e5a2cb525186cd40d","observation_id":"c02938b6-e6fc-4a06-ae25-5c0fe5f89e73","resolution":{"observed_at":"2026-07-31T10:25:16.846874Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:16.964904Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:16.964904Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:0fea81e44f01e83734c24f327debaef4ee0e6d3cfc9e34c47434d705a09b9c6d","observation_id":"95680ee0-5893-40b4-8973-ef9edf894448","resolution":{"observed_at":"2026-07-31T10:25:16.964904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.030546Z","title":"Frans Kaashoek, Eddie Kohler, and Robert Morris","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.030546Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:8fc436b76a37e308ca545afb583c841d7b3d495cca795e16c0cf67e04ce33d57","observation_id":"6f63ebfe-f1e7-42be-a4dc-bcf9e0783298","resolution":{"observed_at":"2026-07-31T10:25:17.030546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.122352Z","title":"Gonzalez, Haotong Zhang, and Ion Stoica","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.122352Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:5c440ec5081b410ccfb99af7190b4bc893a7ea727befa8422e871670b78a8eeb","observation_id":"22ae7ad4-2b14-42d1-b280-f2d0ef46685d","resolution":{"observed_at":"2026-07-31T10:25:17.122352Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.169218Z","title":null,"venue":null,"work_id":null,"year":1973},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.169218Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:2e313e48d131bd5ff05ebec0102ed5dec520f9d613fff243c39f78b88a7431f7","observation_id":"0d58e3f1-7a2d-4488-9ca9-5f2407cd6a9b","resolution":{"observed_at":"2026-07-31T10:25:17.169218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.20984","last_updated":"2025-09-10T19:03:48Z","snapshot_observed_at":"2026-08-05T03:19:51.405028Z","submitted_at":"2025-04-29T17:55:52Z","title":"ACE: A Security Architecture for LLM-Integrated App Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.20984","snapshot_observed_at":"2026-07-31T10:25:17.207949Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.207949Z"},"links":{"cited_paper":"/paper/2504.20984","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:a324d8fabde66cdf154f640b0b29c432fbdb3698bd100f7f1cffa9d680c8724e","observation_id":"2ddf7dd7-8277-4838-b5b8-1b26295f9315","resolution":{"observed_at":"2026-07-31T10:25:17.207949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.254331Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.254331Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:228f798380918fbab3ff4477f68bd5d3ae9a803bf3679b59d7393ef85c83d325","observation_id":"08f666c6-bfe2-4240-a834-2977d9093667","resolution":{"observed_at":"2026-07-31T10:25:17.254331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.288952Z","title":"2025.ceLLMate: Sandboxing Browser AI Agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.288952Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:21fed70358c26b48b6ee3a4b532cf38973f01cb25229de90739bde76aecff5cc","observation_id":"b362d773-54be-4fd9-893a-063e69095f3f","resolution":{"observed_at":"2026-07-31T10:25:17.288952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-540-40965-6_15","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Miller and Jonathan S","venue":"Lecture notes in computer science","work_id":"52622f1e-3517-4f70-868e-df9433b99c8d","year":2003},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.330145Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:936764bcebc624e8a4a51ef3e11f3a6ad464ec4d9d6938572f7ae083783f67e5","observation_id":"4d19128f-4ce6-4f6b-9687-9f6fed825d32","resolution":{"observed_at":"2026-07-31T10:26:29.421769Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.375801Z","title":"Myers and Barbara Liskov","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.375801Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:70455b29336d1a35249628069df9ed256e898c9d669d90d95e4a2db0af9d4d80","observation_id":"059b7df6-b078-4cc0-9d10-c51a25cc430a","resolution":{"observed_at":"2026-07-31T10:25:17.375801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.419376Z","title":"Needham and Michael D","venue":null,"work_id":null,"year":1978},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.419376Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:403fb72ae55505d51145c466c66f8ab1756719b51531935687f4db9156c4f55c","observation_id":"1e9c341d-7432-43d1-9f00-ef50e7c6d732","resolution":{"observed_at":"2026-07-31T10:25:17.419376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.487836Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.487836Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:b7bceeb30e314b04ef2d0d7eb1489e274a015dda4f7d372d84b598cb374b34ec","observation_id":"e0163d9c-e74d-427c-b1a0-5888fe3acc42","resolution":{"observed_at":"2026-07-31T10:25:17.487836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.14421","last_updated":"2026-05-14T06:07:54Z","snapshot_observed_at":"2026-08-05T21:42:41.952480Z","submitted_at":"2026-05-14T06:07:54Z","title":"MemLineage: Lineage-Guided Enforcement for LLM Agent Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.14421","snapshot_observed_at":"2026-07-31T10:25:17.584642Z","title":"2026.MemLineage: Lineage-Guided Enforcement for LLM Agent Memory","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.584642Z"},"links":{"cited_paper":"/paper/2605.14421","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:7175c7faccf7e7d7ae2b09d91e29a9f3f7ef0499a50a9b1bfc05e13daf08201a","observation_id":"2b32f4d1-45de-410c-a7c4-0a4e2cf236c4","resolution":{"observed_at":"2026-07-31T10:25:17.584642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.621097Z","title":null,"venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.621097Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:f08cd173e139db7557e1aca1c3de2846a6d0a7487216c1e22912ab34e3f1023b","observation_id":"3dfb20f2-7298-4ef2-93c2-9fa6001e79a2","resolution":{"observed_at":"2026-07-31T10:25:17.621097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.661479Z","title":"2023.NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.661479Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:5b0ef05f9490e80ab616c88f0a15654085ed544f993e681808cf4ad5c87c53ad","observation_id":"950b4184-2ff3-41ea-a117-ac371f5e0915","resolution":{"observed_at":"2026-07-31T10:25:17.661479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.697081Z","title":null,"venue":null,"work_id":null,"year":1973},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.697081Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:96e80112aa82b6ea4e9f9bf3d58126bdd893ecec192de3706e3cbcdcc57d98e3","observation_id":"710bf588-c76d-427f-a9a9-577a6a553c8e","resolution":{"observed_at":"2026-07-31T10:25:17.697081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.737499Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.737499Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:d23a6aadcac2c55faa05feda2b7cd7e2367d5f04ec3b46d80f1f34191aba9def","observation_id":"f8e344a7-6e26-4555-834b-453299a767ff","resolution":{"observed_at":"2026-07-31T10:25:17.737499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.777921Z","title":null,"venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.777921Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:caa39e414337dd65dabaf57807414aca9adf6a8feacac035275c2a5bec5c8e43","observation_id":"a03d16af-3851-4840-9585-1f95da5567b8","resolution":{"observed_at":"2026-07-31T10:25:17.777921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3233/jcs-","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:26:29.055306Z","title":null,"venue":null,"work_id":"078c41f5-bc17-43ff-a4ed-40638ad0e8ea","year":2009},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.818284Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:add4910a886516a21e368a2f652a96c6b2ae955b2bdb0acd49fe2340cb466cad","observation_id":"09d9cb12-3ff1-4e53-8147-9890b1ae03d1","resolution":{"observed_at":"2026-07-31T10:26:29.216916Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.860501Z","title":"Saltzer and Michael D","venue":null,"work_id":null,"year":1975},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.860501Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:ac94b931b44f8f7a8f5ca16f66689d8a97c5f7068ed4b9d452a815ebc07e32ee","observation_id":"60bc27fc-1824-41ed-a853-bbc65937ec46","resolution":{"observed_at":"2026-07-31T10:25:17.860501Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/sp.2010.26","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Schwartz, Thanassis Avgerinos, and David Brumley","venue":null,"work_id":"8f397e10-e1ef-4ca6-82aa-17983f1ff2c5","year":2010},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.897367Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:f94eb70f56977319f7ee1dc0c87cbc1fedcf9179f34773bcb98632b532416224","observation_id":"37d58e06-6ded-498b-80f0-153d91feb3f1","resolution":{"observed_at":"2026-07-31T10:26:29.036064Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.930533Z","title":"Mitchell, and David Mazières","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.930533Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:e6b56422f1b8e581727c5c5ad5d978bf50ce056c92258d8dd962f9fd4b82301a","observation_id":"a032a7b1-7352-4f70-ae67-999c19670fb7","resolution":{"observed_at":"2026-07-31T10:25:17.930533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:17.965487Z","title":null,"venue":null,"work_id":null,"year":1990},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.965487Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:04f213380dce01f93081d423116decdb42a5934dfab510e59e1cd3d72d4083fb","observation_id":"5d9d309e-7cc6-4c0c-afb0-35b896eb6644","resolution":{"observed_at":"2026-07-31T10:25:17.965487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-07-06T20:57:47.748881Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-07-31T10:25:18.009688Z","title":"Poskitt, and Jun Sun","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.009688Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:f4d7fb4ec5b17068bc2a723f0017bfacb11cd9afae0fa2ae747b76618d73d292","observation_id":"44135f1b-310d-4854-969c-2e9fdf22e45e","resolution":{"observed_at":"2026-07-31T10:25:18.009688Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.04990","last_updated":"2026-06-28T07:06:10Z","snapshot_observed_at":"2026-08-08T23:42:22.248970Z","submitted_at":"2026-06-03T15:12:47Z","title":"From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.04990","snapshot_observed_at":"2026-07-31T10:25:18.046653Z","title":"2026.From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Prove- nance in LLM Agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.046653Z"},"links":{"cited_paper":"/paper/2606.04990","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:9144eb3e58d8e1df4f3d383e0604af5bdc52d1de32790711eb03219b882ddd55","observation_id":"15970527-ab3d-4dd9-a3b2-0362adf86b9d","resolution":{"observed_at":"2026-07-31T10:25:18.046653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.11378","last_updated":"2026-04-13T12:16:45Z","snapshot_observed_at":"2026-08-11T15:31:18.082500Z","submitted_at":"2026-04-13T12:16:45Z","title":"From Agent Loops to Structured Graphs:A Scheduler-Theoretic Framework for LLM Agent Execution","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.11378","snapshot_observed_at":"2026-07-31T10:25:18.111860Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.111860Z"},"links":{"cited_paper":"/paper/2604.11378","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:ee644e168de714b88e51a670aafc35345f9777ffe5bcc8ae18decc3bf95a4106","observation_id":"cd58cb66-8bc1-49f6-ad79-fcee7e7dbf29","resolution":{"observed_at":"2026-07-31T10:25:18.111860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:18.148519Z","title":"2023.The Dual LLM Pattern for Building AI Assistants That Can Resist Prompt Injection","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.148519Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:61e8032fe5a7ac7e4d90bc6559416dd1ef333263309f726fdbb5485535ebc48a","observation_id":"100b7c66-a17a-45a0-8f49-f93b425c24cd","resolution":{"observed_at":"2026-07-31T10:25:18.148519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.28138","last_updated":"2026-04-30T17:20:19Z","snapshot_observed_at":"2026-08-11T18:05:39.203516Z","submitted_at":"2026-04-30T17:20:19Z","title":"Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.28138","snapshot_observed_at":"2026-07-31T10:25:18.186333Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.186333Z"},"links":{"cited_paper":"/paper/2604.28138","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:d5ca84d992c547d016ee6c7f892af9740217a583db440c43c2871ebafbf55d2b","observation_id":"8938ffe2-a3c2-48a6-a4f4-3568f54d6e12","resolution":{"observed_at":"2026-07-31T10:25:18.186333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:18.216641Z","title":null,"venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.216641Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:80efbc22d96d02af6210eb1143135ce33735e2ecdf3d7811c397d6a9e0e7711a","observation_id":"bda3359f-bcdf-41a7-b4e6-93659cba1a58","resolution":{"observed_at":"2026-07-31T10:25:18.216641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:18.255814Z","title":null,"venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.255814Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:b670dcd58db77e91e1ff277f7c22c7015e68f4a88d3dc397f318435d20e1d808","observation_id":"9045eab2-1096-4284-b0d3-6e6456a918d4","resolution":{"observed_at":"2026-07-31T10:25:18.255814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.07104","last_updated":"2024-06-06T00:10:06Z","snapshot_observed_at":"2026-08-11T10:42:54.633244Z","submitted_at":"2023-12-12T09:34:27Z","title":"SGLang: Efficient Execution of Structured Language Model Programs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.07104","snapshot_observed_at":"2026-07-31T10:25:18.288712Z","title":"Gonzalez, Ion Stoica, Frank Sifei Luan, and Hao Zhang","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.288712Z"},"links":{"cited_paper":"/paper/2312.07104","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:5c61636d4eb1a62163ae2418c31958e5ff7d0247a8c0b5a44de8c35c3286a1a1","observation_id":"9dad7a4f-d1a1-4aa2-88db-76d8328dd82d","resolution":{"observed_at":"2026-07-31T10:25:18.288712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:18.320400Z","title":"send the routine email: to all@northwind. example, subject ‘Routine update’, body ‘The scheduled corporate update is complete. ’","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:18.320400Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:5e3cae57b3b394475df5a5395635b4b22e4d9c9264457466d5379d73facbeeb3","observation_id":"5a18b45f-6601-4a1f-acfe-af4cdcd02b96","resolution":{"observed_at":"2026-07-31T10:25:18.320400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T10:25:15.779954Z","title":"InFindings of the Association for Computational Linguistics: ACL 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:15.779954Z"},"links":{"citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:b0f1191b5b7818a576884f684ec096e4dc82af92dff34898ecfff4c0a321cc85","observation_id":"f362ef25-5060-46a4-9ae9-448abaffc082","resolution":{"observed_at":"2026-07-31T10:25:15.779954Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.00991","last_updated":"2026-05-07T14:09:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-03-01T08:39:37Z","title":"Tracking Capabilities for Safer Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.00991","snapshot_observed_at":"2026-07-31T10:25:17.555138Z","title":"arXiv:2603.00991 [cs.PL]","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-07-31T10:25:17.555138Z"},"links":{"cited_paper":"/paper/2603.00991","citing_paper":"/paper/2607.24625"},"observation_digest":"sha256:6063f00980e5b24b4e2bee85328050d5d56d827fa51112f20dc759438c727ac8","observation_id":"75e33d6b-9bc4-4e1e-a2db-bcd93aeca6dd","resolution":{"observed_at":"2026-07-31T10:25:17.555138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":3,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":48,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 1 inbound Pith citation observation for arXiv:2607.24625."}