{"as_of":"2026-08-09T18:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:88d5061935d01b5345743cd8d93002b21020063194e3c6bf777f83d0ae5140dd","coverage":[{"denominator":65,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":65,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-31T04:54:36.203173Z","state":"measured"},{"denominator":65,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":65,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.24964/citation-record","integrity":"/paper/2607.24964/integrity","json":"/paper/2607.24964/citation-record.json","paper":"/paper/2607.24964"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2604.10767","last_updated":"2026-07-15T11:03:35Z","snapshot_observed_at":"2026-08-03T09:15:17.092896Z","submitted_at":"2026-04-12T18:31:46Z","title":"VulWeaver: Weaving Broken Semantics for Grounded Vulnerability Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.10767","snapshot_observed_at":"2026-07-31T04:54:35.999600Z","title":"VulWeaver: Weaving broken semantics for grounded vulnerability detection, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:35.999600Z"},"links":{"cited_paper":"/paper/2604.10767","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:0a87615b7b63a7d3d2b09dc793ec87fa9bfab2e4a1d95b36d5a9a24077a272f9","observation_id":"359dff9b-95ee-46fb-a4ca-ad762f087302","resolution":{"observed_at":"2026-07-31T04:54:35.999600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.004027Z","title":"A theory of dual channel constraints","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.004027Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:e6f792c31cc0981f66b03edcafc9157fa7b6245cd5940b5fcd847c67f82d92bb","observation_id":"e0a517e5-b97b-47e0-bda5-95ccd61b4517","resolution":{"observed_at":"2026-07-31T04:54:36.004027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.007347Z","title":"naturalizing","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.007347Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:7ddb5c950e0948ce1869e710e8b1b51ae16f353533f06d0c8441bcb4dc694a4a","observation_id":"03d3aa39-c6a5-4dae-804c-f21145889107","resolution":{"observed_at":"2026-07-31T04:54:36.007347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23643","last_updated":"2025-09-03T12:30:47Z","snapshot_observed_at":"2026-07-06T21:33:02.686798Z","submitted_at":"2025-05-29T16:50:41Z","title":"Securing AI Agents with Information-Flow Control","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23643","snapshot_observed_at":"2026-07-31T04:54:36.011136Z","title":"Se- curing AI agents with information-flow control, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.011136Z"},"links":{"cited_paper":"/paper/2505.23643","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:ec8891ab44dae128ad67e77fb0b73c1eb160ff6c59f3636b32d5eaabddabec70","observation_id":"6ae88985-18cb-42be-8252-f38ccdab8c23","resolution":{"observed_at":"2026-07-31T04:54:36.011136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.014686Z","title":"Abstract interpreta- tion: A unified lattice model for static analysis of pro- grams by construction or approximation of fixpoints","venue":null,"work_id":null,"year":1977},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.014686Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:5c4972ea6292f0211d14feb4fe2ac0d7c42755a243efe7c5197be34b3c1f1cce","observation_id":"09d8014f-0318-4c36-b413-639976e3954f","resolution":{"observed_at":"2026-07-31T04:54:36.014686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-07-31T04:54:36.017835Z","title":"Defeating prompt injections by design, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.017835Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:62d949e77257dc2a90e88c83bbb435c15f1cce55fa57195df02cd49c2dcbeab6","observation_id":"e3826c43-d958-4266-85c9-4faa1a5f6328","resolution":{"observed_at":"2026-07-31T04:54:36.017835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.021370Z","title":"Re- ducing false positives in static bug detection with llms: An empirical study in industry.arXiv preprint arXiv:2601.18844, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.021370Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:ebe66fb5afd3a1e39c8ac3cbc5346f805751780f029c486b94a6c9a88cf27cd9","observation_id":"214363f3-47ce-42f8-957e-f57c4db13a5f","resolution":{"observed_at":"2026-07-31T04:54:36.021370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.10322","last_updated":"2025-06-12T03:11:38Z","snapshot_observed_at":"2026-08-08T00:51:13.611345Z","submitted_at":"2025-06-12T03:11:38Z","title":"Minimizing False Positives in Static Bug Detection via LLM-Enhanced Path Feasibility Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.10322","snapshot_observed_at":"2026-07-31T04:54:36.024104Z","title":"Minimizing false positives in static bug detection via LLM-enhanced path feasibility analysis, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.024104Z"},"links":{"cited_paper":"/paper/2506.10322","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:f6f2ac7ef2f923f76dc8e298c3db1290cd4e18ec5631718587ee6cdce5c756bc","observation_id":"201b0d23-30c6-45c7-b320-3d3768794dfd","resolution":{"observed_at":"2026-07-31T04:54:36.024104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.027753Z","title":"Vul-rag: Enhancing llm-based vulnerability detection via knowledge-level rag.ACM Transactions on Software Engineering and Methodol- ogy, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.027753Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:62b5dea0769d205b9bd3c2c38995dc96df53ecf99a16f2d36761537c7e765d38","observation_id":"2cb97a8b-17c7-4c91-8601-230598814cdb","resolution":{"observed_at":"2026-07-31T04:54:36.027753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.030645Z","title":"Syceval: Evaluating llm 14 sycophancy","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.030645Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:05dc1f7cdc720892b1c873c77598e48744e1d1feefe7d365aeb8c187813efde4","observation_id":"ab954a04-2883-4864-84d9-514ff1503aaf","resolution":{"observed_at":"2026-07-31T04:54:36.030645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.033519Z","title":"PISanitizer: Preventing prompt injec- tion to long-context LLMs via prompt sanitization, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.033519Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:faa89207611b262a7473014dab947c63e48713baa661684668b5a553921fd3d8","observation_id":"dea991a1-45b5-4190-b34a-d01230f7915e","resolution":{"observed_at":"2026-07-31T04:54:36.033519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.036798Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.036798Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:27271bef6234cb3fba9bdc7874158b2f665ac1cef73996233f339ebaaa3dd10e","observation_id":"735a8b0d-061d-4241-8dbb-3cca64887624","resolution":{"observed_at":"2026-07-31T04:54:36.036798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.039417Z","title":"Incremental analysis for code scanning","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.039417Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:2c60b89c8bd791293d4b02d0e9f35848515b0aa705594f73946675b55939639c","observation_id":"6ce69f66-e586-4ef4-a318-8f4460c4d08e","resolution":{"observed_at":"2026-07-31T04:54:36.039417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.042245Z","title":"Ai-powered security detections","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.042245Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:92372a82304e2f009b24a84791b3c8c67b988790f10609298e2db82ca82013db","observation_id":"396f1db1-d829-41d2-befe-d87a6bcf666a","resolution":{"observed_at":"2026-07-31T04:54:36.042245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.044852Z","title":"Prompt injection attacks in large language models and AI agent systems: A com- prehensive review of vulnerabilities, attack vectors, and defense mechanisms.Information, 17(1), 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.044852Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:635142102755bf5de992dc224cdfe213bfe856db459bd54badd6c4cf945fbd5c","observation_id":"651287d8-3863-4d56-ad98-534983148dea","resolution":{"observed_at":"2026-07-31T04:54:36.044852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.18160","last_updated":"2025-05-29T22:08:26Z","snapshot_observed_at":"2026-07-06T20:28:14.293619Z","submitted_at":"2025-01-30T05:56:30Z","title":"RepoAudit: An Autonomous LLM-Agent for Repository-Level Code Auditing","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.18160","snapshot_observed_at":"2026-07-31T04:54:36.048659Z","title":"RepoAudit: An autonomous LLM- agent for repository-level code auditing","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.048659Z"},"links":{"cited_paper":"/paper/2501.18160","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:010a037b2671d3902967c9f284829df2bf06a72d627a918ee56aff3c4fb1a62c","observation_id":"efc6688f-d112-440f-ab4b-bcf6ef614ea0","resolution":{"observed_at":"2026-07-31T04:54:36.048659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14720","last_updated":"2024-03-20T15:26:23Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T15:26:23Z","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14720","snapshot_observed_at":"2026-07-31T04:54:36.051904Z","title":"Defending against indirect prompt injection attacks with spotlight- ing.arXiv preprint arXiv:2403.14720, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.051904Z"},"links":{"cited_paper":"/paper/2403.14720","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:2ac89967ffee2d92c4eff43f266602ef9af2deb438da0db081e98cda64254ec1","observation_id":"b434ee78-de1c-4bea-b4e8-0d0fce1979c6","resolution":{"observed_at":"2026-07-31T04:54:36.051904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.055183Z","title":"An empirical study of suppressed static anal- ysis warnings.Proceedings of the ACM on Software Engineering, 2(FSE):290–311, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.055183Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:3cb94f412acbf22b862e9209c208c7e7978036361dd96398c2060a3707bf6867","observation_id":"67d57877-6a3f-4052-be0b-2cd911be265b","resolution":{"observed_at":"2026-07-31T04:54:36.055183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.058340Z","title":null,"venue":null,"work_id":null,"year":1976},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.058340Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:0d81c956ec7ffc3a5559f32ea5da76962f771f577cf2b487ae622d159243c417","observation_id":"92778ed3-17af-4d76-bb3c-04c684d818cf","resolution":{"observed_at":"2026-07-31T04:54:36.058340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.061052Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.061052Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:ec336c52101864d25f38612a12297042803464a8705b15489fdfff2b730ada56","observation_id":"a37546c9-3c3e-406f-84d5-54e12f1ae1d2","resolution":{"observed_at":"2026-07-31T04:54:36.061052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.063783Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.063783Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:e9e393925621feb14e09cca5054e794ee473cb425337936806ec6f8775c090cf","observation_id":"802e0e00-39d2-48d7-a13f-1e3c8ce69249","resolution":{"observed_at":"2026-07-31T04:54:36.063783Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.066764Z","title":"Llm-based vulnerability detection at project scale: An empirical study.arXiv preprint arXiv:2601.19239, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.066764Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:319c6233461bdcb72a549e6d79ae4ff2c4f23fd299558c7093be03c9cb1d7bf5","observation_id":"a2844616-ae78-4d21-b845-b8a878bf8d3d","resolution":{"observed_at":"2026-07-31T04:54:36.066764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.069667Z","title":"Cotdeceptor: Adversarial code obfuscation against cot-enhanced llm code agents.arXiv preprint arXiv:2512.21250, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.069667Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:ae60a2c13c5547a96699375dfa132e6ee192c8f8e0fb5ec699b3756cc3070ba2","observation_id":"f401c4b3-2c38-4d41-a8fc-3024b507fa23","resolution":{"observed_at":"2026-07-31T04:54:36.069667Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.072633Z","title":"Make a feint to the east while attacking in the west: Blinding llm- based code auditors with flashboom attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.072633Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:5b0e0ed87b301fa45563c4d901f0a896ef1a042388ba869891a8cfe61672a6e2","observation_id":"536d8f07-8621-4cd0-9e03-8959e3e3446c","resolution":{"observed_at":"2026-07-31T04:54:36.072633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.075426Z","title":"Make a feint to the east while attacking in the west: Blinding LLM-based code auditors with Flashboom attacks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.075426Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:257c25cee6c4a2535f410816b132596c2152887c462a9001246d51b86ec388b5","observation_id":"1a99272f-503c-4dd8-bcfd-d5e3ab46a08d","resolution":{"observed_at":"2026-07-31T04:54:36.075426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.14012","last_updated":"2026-05-02T00:50:04Z","snapshot_observed_at":"2026-07-06T22:45:58.457005Z","submitted_at":"2026-02-15T06:33:25Z","title":"From SFT to RL: Demystifying the Post-Training Pipeline for LLM-based Vulnerability Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.14012","snapshot_observed_at":"2026-07-31T04:54:36.078626Z","title":"From sft to rl: Demystifying the post-training pipeline for llm-based vulnerability detection.arXiv preprint arXiv:2602.14012, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.078626Z"},"links":{"cited_paper":"/paper/2602.14012","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:d3311bb735ad16162bef0948609adb3d0b92e959aa1b6eaccbf23011ec88c452","observation_id":"9618858c-1c7c-4604-9d7d-89eb076938e1","resolution":{"observed_at":"2026-07-31T04:54:36.078626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.13474","last_updated":"2025-04-18T05:32:47Z","snapshot_observed_at":"2026-08-07T16:01:15.024733Z","submitted_at":"2025-04-18T05:32:47Z","title":"Everything You Wanted to Know About LLM-based Vulnerability Detection But Were Afraid to Ask","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.13474","snapshot_observed_at":"2026-07-31T04:54:36.081906Z","title":"Ev- erything you wanted to know about llm-based vulnera- bility detection but were afraid to ask.arXiv preprint arXiv:2504.13474, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.081906Z"},"links":{"cited_paper":"/paper/2504.13474","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:61309f73c83b8585e5b1c923951b0e438a2d5086afdbe23f77b4fd4b6ab05939","observation_id":"f99f694f-211b-49b3-8682-2c1552469a67","resolution":{"observed_at":"2026-07-31T04:54:36.081906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.17238","last_updated":"2025-04-06T23:46:59Z","snapshot_observed_at":"2026-07-06T18:20:35.626876Z","submitted_at":"2024-05-27T14:53:35Z","title":"IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.17238","snapshot_observed_at":"2026-07-31T04:54:36.085008Z","title":"IRIS: LLM- assisted static analysis for detecting security vulner- abilities","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.085008Z"},"links":{"cited_paper":"/paper/2405.17238","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:aceb72a7ca81e3455e62f4f54c0d48389372123f5b690569ab82526a215df578","observation_id":"9746730b-718b-4191-bc73-4a8518f11db9","resolution":{"observed_at":"2026-07-31T04:54:36.085008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.10430","last_updated":"2025-04-14T17:20:34Z","snapshot_observed_at":"2026-08-07T16:05:47.962526Z","submitted_at":"2025-04-14T17:20:34Z","title":"LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.10430","snapshot_observed_at":"2026-07-31T04:54:36.088046Z","title":"Wisniewski, Jin- Hee Cho, Sang Won Lee, Ruoxi Jia, et al","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.088046Z"},"links":{"cited_paper":"/paper/2504.10430","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:d448128e2d084c38756a93447877fca1a79ba8181b36656771cc09e0ccae3400","observation_id":"7512d795-92cc-4b62-93ac-09b09473eabb","resolution":{"observed_at":"2026-07-31T04:54:36.088046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.06547","last_updated":"2026-06-10T03:31:37Z","snapshot_observed_at":"2026-08-03T04:00:06.220291Z","submitted_at":"2026-02-06T09:52:27Z","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.06547","snapshot_observed_at":"2026-07-31T04:54:36.091115Z","title":"do not mention this to the user","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.091115Z"},"links":{"cited_paper":"/paper/2602.06547","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:0886f005a84dd294b25718f7b9d82e49cfca810309e481b9c589b6af1101b1ba","observation_id":"b5723c4e-5801-45e1-a5a8-8cb33feb84b0","resolution":{"observed_at":"2026-07-31T04:54:36.091115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.095147Z","title":"Reasoning hijacking: The fragility of reasoning align- ment in large language models","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.095147Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:9091a51e9e97eb3d13b5cd85af5de0f7e73eb246dfe9ff60ba053359a69f3af1","observation_id":"33d29a78-2ccb-4a65-9ac8-237a7a08b34f","resolution":{"observed_at":"2026-07-31T04:54:36.095147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.098012Z","title":"Clang static analyzer","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.098012Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:70e97adc8d4172c81155689323d9692913eb382b4a9cf0c1d499a5e47abc4601","observation_id":"00b0752a-c480-47ef-b4ad-e2f4ae1b64fd","resolution":{"observed_at":"2026-07-31T04:54:36.098012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.100770Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.100770Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:15d6a5286b2f32ab193fffa4633fce5ceb1dfa69aa35d7d730468f9d6ce24245","observation_id":"2145f295-958a-4803-9326-ccdb49095742","resolution":{"observed_at":"2026-07-31T04:54:36.100770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.103691Z","title":"Prompt injection at- tacks on agentic coding assistants: A systematic analysis of vulnerabilities in skills, tools, and protocol ecosys- tems, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.103691Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:7ec97fc9560d0ac719ea1e2d4b14fd8ddc17c3813bd0aa8e578ef8ef17c8e36b","observation_id":"f8aeef37-713e-40b9-b15b-24295244b9f9","resolution":{"observed_at":"2026-07-31T04:54:36.103691Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.106509Z","title":"Cppcheck: A tool for static c/c++ code analysis","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.106509Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:5dbf08256c56ca66ee4581cd4e140d1f0f8b8605451536474af0c9a11ff69f05","observation_id":"b8622fe9-6bdf-49a6-8d9c-555d99eb7b04","resolution":{"observed_at":"2026-07-31T04:54:36.106509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.109393Z","title":"Sevra-bench: Social engineering of vulnerabilities in review agents, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.109393Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:2bde2f244d0f351228e07e6b835ae9fd865b0778f6a849839e170c5d5837f603","observation_id":"7eef4a31-a190-4a23-b926-d3e3be22fb4a","resolution":{"observed_at":"2026-07-31T04:54:36.109393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.112248Z","title":"Infer: A static analyzer for java, c, c++, and objective-c.https://fbinfer.com/, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.112248Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:21b7b287da2ef3b16cf2a2696478bba3f6c698d336f820c93bb0cfa310e3ca0c","observation_id":"d8445e12-8500-4a47-af5e-fe8a88745563","resolution":{"observed_at":"2026-07-31T04:54:36.112248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.115043Z","title":"Microsoft digital defense report 2025: Light- ing the path to a secure future","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.115043Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:bedaa637b1e90fc854c874aadd64e404cc6eb0d2f2690f0c3e7e1390a58aab70","observation_id":"fb8b29dd-039f-4711-82ca-3f1874de9698","resolution":{"observed_at":"2026-07-31T04:54:36.115043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.18740","last_updated":"2026-04-23T15:04:19Z","snapshot_observed_at":"2026-08-07T16:01:08.335473Z","submitted_at":"2026-03-19T10:40:27Z","title":"Measuring and Exploiting Contextual Bias in LLM-Assisted Security Code Review","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.18740","snapshot_observed_at":"2026-07-31T04:54:36.117931Z","title":"Measuring and exploiting contextual bias in llm-assisted security code review.arXiv preprint arXiv:2603.18740, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.117931Z"},"links":{"cited_paper":"/paper/2603.18740","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:9d96a0d5575120a6e79258406acc20175a0dba6e106b6400037d83586b647d80","observation_id":"832d5c17-9d28-4100-9e49-5fad25af5e3d","resolution":{"observed_at":"2026-07-31T04:54:36.117931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.120804Z","title":"MegaVul: A c/c++ vulnerability dataset with comprehensive code representations","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.120804Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:d87ad57d028709651dacc0688835991bc78c0ce0515aa7d03546ab9b894e854f","observation_id":"d91a8940-4142-42ad-b28b-3b0e70466250","resolution":{"observed_at":"2026-07-31T04:54:36.120804Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.123579Z","title":"Lis- tening to programmers—taxonomies and characteristics of comments in operating system code","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.123579Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:ae67b43ab8cda9d5af8c8f1d8698adec84157350debd84efed39b2825d8f0df6","observation_id":"64d94cb1-650b-4912-8438-cdda544a8bec","resolution":{"observed_at":"2026-07-31T04:54:36.123579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03081","last_updated":"2026-04-03T14:58:58Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-03T14:58:58Z","title":"Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03081","snapshot_observed_at":"2026-07-31T04:54:36.126618Z","title":"Supply-chain poisoning attacks against llm coding agent skill ecosystems.arXiv preprint arXiv:2604.03081, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.126618Z"},"links":{"cited_paper":"/paper/2604.03081","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:0b153fda7b8204cff3f87a708f8972902f973187c90ebda8598f61fc9324b887","observation_id":"26285cb6-55e2-40a9-8013-a353390c8497","resolution":{"observed_at":"2026-07-31T04:54:36.126618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.130106Z","title":"Secret breach detection in source code with large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.130106Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:f6145d514cd71f19b0ed1712be0894191428ad3ac71014b1db6f660b0e658c48","observation_id":"ec18a865-289c-4452-b7e1-cc8f51e7a2f7","resolution":{"observed_at":"2026-07-31T04:54:36.130106Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2006.06841","last_updated":"2020-06-11T21:35:24Z","snapshot_observed_at":"2026-08-05T15:37:05.603231Z","submitted_at":"2020-06-11T21:35:24Z","title":"Backdoors in Neural Models of Source Code","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.06841","snapshot_observed_at":"2026-07-31T04:54:36.133077Z","title":"Back- doors in neural models of source code","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.133077Z"},"links":{"cited_paper":"/paper/2006.06841","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:14e1604fab1e5e85702ac25000e48baada5a851d8b11c78c3e3ae6879c46b0d0","observation_id":"a104144a-3cde-4052-b387-507322cce0ca","resolution":{"observed_at":"2026-07-31T04:54:36.133077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18341","last_updated":"2026-04-08T10:21:32Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T10:28:10Z","title":"Agentic Much? Adoption of Coding Agents on GitHub","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18341","snapshot_observed_at":"2026-07-31T04:54:36.137025Z","title":"Agentic much? adoption of coding agents on github.arXiv preprint arXiv:2601.18341, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.137025Z"},"links":{"cited_paper":"/paper/2601.18341","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:d8abc5dab77b32f9450bba4504d1b68d988d799c6414f72721cb69c49ac3fbd7","observation_id":"5a2c6889-97fd-4882-8727-1066a9d59700","resolution":{"observed_at":"2026-07-31T04:54:36.137025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.02220","last_updated":"2020-10-08T23:12:25Z","snapshot_observed_at":"2026-08-03T07:04:21.193594Z","submitted_at":"2020-07-05T01:13:36Z","title":"You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.02220","snapshot_observed_at":"2026-07-31T04:54:36.140068Z","title":"You autocomplete me: Poisoning vul- nerabilities in neural code completion","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.140068Z"},"links":{"cited_paper":"/paper/2007.02220","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:03894f557fe18b882673167786620d2b6a2cd832507bc0eb26fadeb7aaa6283d","observation_id":"8c4253d6-323f-4b50-91ab-31792da47150","resolution":{"observed_at":"2026-07-31T04:54:36.140068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.143155Z","title":"Llms in software security: A survey of vulnerability detection techniques and insights","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.143155Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:84fa109a19ba18563b27cd91f06cc8103a7b3b72dab6d91e68baccdbf711c683","observation_id":"e5a863df-aa8c-44ec-abf3-1d80df41c0dd","resolution":{"observed_at":"2026-07-31T04:54:36.143155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.145938Z","title":"Promptarmor: Simple yet effective prompt injection defenses, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.145938Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:116ba138b537b53a59c1edd260b11d1abe300d5752346442b922a48c143313cb","observation_id":"7b11ff17-97f5-4b3c-96e9-8b98b1c76a17","resolution":{"observed_at":"2026-07-31T04:54:36.145938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.148684Z","title":"Pull request analy- sis","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.148684Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:2fad1ab98cda963017aef79ef2b3be9972d86fc4c5684d124d4406d145ba1ca5","observation_id":"31f71e45-b11a-46c3-91b0-6473dd525f99","resolution":{"observed_at":"2026-07-31T04:54:36.148684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.151568Z","title":"Syntax- and compilation-preserving evasion of llm vulnerability de- tectors, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.151568Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:cd48f1e7eca637cdcb3c49d0ed8646a4cf5d6e0fcf69e10af2f41d775aba250b","observation_id":"4020683f-28bf-4d2d-b8ef-373e4e8e88d8","resolution":{"observed_at":"2026-07-31T04:54:36.151568Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.154589Z","title":"Coverity static analysis","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.154589Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:5b37d5420419be31c3003079391a306e17d97e68c142348a473de8d1f61aa215","observation_id":"1a6b624c-f424-4a95-a7c9-6862f478eb24","resolution":{"observed_at":"2026-07-31T04:54:36.154589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.161367Z","title":"Tomassi and Cindy Rubio-González","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.161367Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:68ffafd0483d952ac82f9033ac8fa8511e1fc128e18b781541f5d9f43fd01e72","observation_id":"2ac79f46-34cb-4802-a496-96f327999120","resolution":{"observed_at":"2026-07-31T04:54:36.161367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.165139Z","title":"VulnLLM-R: A fine-tuned reasoning model for vulnerability detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.165139Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:216596e547980288b7867bbb0d4d5e0497d49a7b81b0f607330aaf2dcae73093","observation_id":"46013548-4a26-449b-b84a-afcb2451075a","resolution":{"observed_at":"2026-07-31T04:54:36.165139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.03447","last_updated":"2026-07-21T18:39:11Z","snapshot_observed_at":"2026-08-02T16:51:19.425084Z","submitted_at":"2026-04-03T20:38:14Z","title":"Measuring LLM Trust Allocation Across Conflicting Software Artifacts","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.03447","snapshot_observed_at":"2026-07-31T04:54:36.168169Z","title":"Measuring LLM trust allocation across con- flicting software artifacts, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.168169Z"},"links":{"cited_paper":"/paper/2604.03447","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:c17f71eab85de4fad12bff5a6d2dafcb00d34a19b125b9cb9cbaa02f52f24416","observation_id":"c50c3205-cad9-437f-90d1-51cd9968a3f8","resolution":{"observed_at":"2026-07-31T04:54:36.168169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13208","last_updated":"2024-04-19T22:55:23Z","snapshot_observed_at":"2026-08-02T11:48:17.206729Z","submitted_at":"2024-04-19T22:55:23Z","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13208","snapshot_observed_at":"2026-07-31T04:54:36.171263Z","title":"The instruction hierarchy: Training LLMs to prioritize privileged in- structions.arXiv preprint arXiv:2404.13208, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.171263Z"},"links":{"cited_paper":"/paper/2404.13208","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:cac0dc44e8028c5a9fb195244303cf8a8558c86a63059624c05718d37a4e8765","observation_id":"ccff77c9-e108-46c9-996d-3781a5a13cac","resolution":{"observed_at":"2026-07-31T04:54:36.171263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10754","last_updated":"2024-11-23T19:23:14Z","snapshot_observed_at":"2026-07-06T17:31:13.010759Z","submitted_at":"2024-02-16T15:21:35Z","title":"LLMDFA: Analyzing Dataflow in Code with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10754","snapshot_observed_at":"2026-07-31T04:54:36.175377Z","title":"LLMDFA: An- alyzing dataflow in code with large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.175377Z"},"links":{"cited_paper":"/paper/2402.10754","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:e1d1da4b33f25e0dbec409b6a5ecd90ad9e5c445ba941b86cdcab96dedc16891","observation_id":"6a86c6aa-24c2-4212-b061-823682aa414f","resolution":{"observed_at":"2026-07-31T04:54:36.175377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.178694Z","title":"Defending against prompt injection with DataFilter, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.178694Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:75779280e2c3eb319dc0a518fe4f775ad757d1ca4b4dcda1a4baa5a581e30883","observation_id":"f327ff41-5f2c-4446-b0fc-c9c3b778f7b5","resolution":{"observed_at":"2026-07-31T04:54:36.178694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.182424Z","title":"Scale: Constructing struc- tured natural language comment trees for software vul- nerability detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.182424Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:b5f6bc7dfbe8d2dcbcf2ae577898230b597f77440377c419e9867972809383dd","observation_id":"a3e70435-c2e9-4c0a-b0bc-7b10fe7d152a","resolution":{"observed_at":"2026-07-31T04:54:36.182424Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.186005Z","title":"Let the trial begin: A mock-court approach to vulnerabil- ity detection using llm-based agents.arXiv preprint arXiv:2505.10961, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.186005Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:f92f89a3b4d0b0737dffede1232f818a5a9c00dbc936aae9b9f21af65b61494a","observation_id":"768facd7-4344-4843-9ccf-e31c596d0599","resolution":{"observed_at":"2026-07-31T04:54:36.186005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.22952","last_updated":"2026-07-23T08:49:38Z","snapshot_observed_at":"2026-08-08T15:12:15.536520Z","submitted_at":"2026-01-30T13:14:55Z","title":"Sifting the Noise: A Comparative Study of LLM Agents in Vulnerability False Positive Filtering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.22952","snapshot_observed_at":"2026-07-31T04:54:36.188774Z","title":"Sifting the noise: A comparative study of llm agents in vulnerability false positive filtering.arXiv preprint arXiv:2601.22952, 2026","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.188774Z"},"links":{"cited_paper":"/paper/2601.22952","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:81dead409041ae0fe32f976295083da43e28e00779ab801440d045c8aca9dcd4","observation_id":"faeededd-4102-4dd3-8547-125c1b169ddd","resolution":{"observed_at":"2026-07-31T04:54:36.188774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2201.08698","last_updated":"2022-02-26T13:53:53Z","snapshot_observed_at":"2026-07-06T12:29:37.621771Z","submitted_at":"2022-01-21T13:50:51Z","title":"Natural Attack for Pre-trained Models of Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.08698","snapshot_observed_at":"2026-07-31T04:54:36.192043Z","title":"Natural attack for pre-trained models of code","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.192043Z"},"links":{"cited_paper":"/paper/2201.08698","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:b1e9d37f4d3004e0f1965a8176cbe1dd72f36f309192dc945c837d4657c9813f","observation_id":"7d55535f-c6ea-49e3-9262-4e0740dc7918","resolution":{"observed_at":"2026-07-31T04:54:36.192043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00061","last_updated":"2025-03-04T03:32:46Z","snapshot_observed_at":"2026-08-07T17:44:13.894740Z","submitted_at":"2025-02-27T04:04:50Z","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00061","snapshot_observed_at":"2026-07-31T04:54:36.195909Z","title":"Adaptive attacks break defenses against indirect prompt injection attacks on LLM agents","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.195909Z"},"links":{"cited_paper":"/paper/2503.00061","citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:0251fff4b93252233e2d1f54fae966ffd0e3bb6617cbfc4d4927167c38c02fd2","observation_id":"c508a3db-130b-452a-958d-286fec2ad66b","resolution":{"observed_at":"2026-07-31T04:54:36.195909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.199519Z","title":"Vultrlm: Llm-assisted vulnerability detec- tion via ast decomposition and comment enhancement","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.199519Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:35d19d8f5aacb363de695c91fff5c6aee39fa299911a28255a7006b80a7cb8bc","observation_id":"407e8365-0369-4d4f-9c67-328640f82f9d","resolution":{"observed_at":"2026-07-31T04:54:36.199519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.203173Z","title":"Analyze the function step by step... Do not assume vulnerabilities — only report what is supported by the code and context","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.203173Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:d88eb390d2fcb4faf206545c6deeab3aec3b60edae8de0ba6367acaf5e5b01c8","observation_id":"80af0448-6603-4854-b9a3-e780f1b73a96","resolution":{"observed_at":"2026-07-31T04:54:36.203173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-31T04:54:36.158419Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-07-31T04:54:36.158419Z"},"links":{"citing_paper":"/paper/2607.24964"},"observation_digest":"sha256:ed7838eac6f1f1cf9042a7fc216243fc3abb4fe00d46ef56a616b1b0c8052c90","observation_id":"e21ed7a7-3bae-4524-baaf-6a5647b42a50","resolution":{"observed_at":"2026-07-31T04:54:36.158419Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.24964","last_updated":"2026-07-27T18:13:28Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T06:05:15.080571Z","submitted_at":"2026-07-27T18:13:28Z","title":"ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments"},"reference_resolution":{"displayed":65,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":64,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":65},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 65 of 65 outbound references and 0 inbound Pith citation observations for arXiv:2607.24964."}