{"as_of":"2026-08-18T17:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5f817eec58b9b5c570df4bd85266e44ec10c1c159609bde14ac79efb3563334a","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:21:10.198301Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.00718/citation-record","integrity":"/paper/2608.00718/integrity","json":"/paper/2608.00718/citation-record.json","paper":"/paper/2608.00718"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.050150Z","title":"A survey on large language model based autonomous agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.050150Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:0e09314edc67934a5553fe446b961c2e36a19518e69f145ef0c30004440ccbba","observation_id":"9c75200f-a698-4f47-a64a-f0bf7187bcca","resolution":{"observed_at":"2026-08-15T15:21:10.050150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.055930Z","title":"Autogen: Enabling next-gen llm applications via multi-agent conversations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.055930Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:e6c258da9f0ea0a325f2463ceb26264f1aa19182f1af429fdd65d5c6a52066b3","observation_id":"7ad6c78e-05b6-4f3a-97df-5de191dd9add","resolution":{"observed_at":"2026-08-15T15:21:10.055930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.692464Z","title":"Langchain,","venue":null,"work_id":"10cd115f-de97-4a2a-8f86-41992ed52776","year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.061043Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:0971ca823f1907962ca52beaff65986dc38562654919e1f015eea729e45eeab3","observation_id":"19b79064-35aa-4ac1-945f-86014d68d124","resolution":{"observed_at":"2026-08-15T15:21:10.697928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.066037Z","title":"Gaia: a benchmark for general ai assistants,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.066037Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:499cd90e29bfed0245b19e7ccf77e1c4de6b9ba510eda84ff97c5a941be6be52","observation_id":"32c978f4-7a71-4808-a16f-9c8b54dfb8ff","resolution":{"observed_at":"2026-08-15T15:21:10.066037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06770","last_updated":"2024-11-11T23:05:04Z","snapshot_observed_at":"2026-08-18T08:11:45.716032Z","submitted_at":"2023-10-10T16:47:29Z","title":"SWE-bench: Can Language Models Resolve Real-World GitHub Issues?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06770","snapshot_observed_at":"2026-08-15T15:21:10.071558Z","title":"Swe-bench: Can language models resolve real-world github issues?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.071558Z"},"links":{"cited_paper":"/paper/2310.06770","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:c1f06a6d1f4afd45804b365e15f2a982fe59d544adb5d413c1e1760920c50ce9","observation_id":"f8057482-a793-4683-b741-75b8155fde69","resolution":{"observed_at":"2026-08-15T15:21:10.071558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.662137Z","title":"Agent smith: a single image can jailbreak one million multimodal llm agents exponentially fast,","venue":null,"work_id":"d649fc70-74f2-4bfa-9107-ce333b219f2c","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.077284Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:82e328212f8ee78d4a4000b17a3993636ab49d1d7d6468edcd527bed5185d699","observation_id":"9790e6ee-106e-4444-835c-bdb3eb1b8239","resolution":{"observed_at":"2026-08-15T15:21:10.667432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-11T20:32:18.138792Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-15T15:21:10.082569Z","title":"Prompt infection: Llm-to-llm prompt injection within multi-agent systems,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.082569Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:7aa0abd9d7f48e358c98b19bb49c9b67f59549e83c9691191da0dc2d9c98046e","observation_id":"032f3d8d-4b5a-4368-a791-26a9cac76b8f","resolution":{"observed_at":"2026-08-15T15:21:10.082569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.644000Z","title":"Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injection,","venue":null,"work_id":"9ec6c401-13ad-46af-a271-965fde258055","year":2023},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.087640Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:963e1d17dc2951a5566220938a6fb5a518bc505efe5c46c831c39d5c749f482c","observation_id":"433188f8-48e3-4a14-adb7-f254b4811c27","resolution":{"observed_at":"2026-08-15T15:21:10.649389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.625433Z","title":"{PoisonedRAG}: Knowledge corruption attacks to{Retrieval-Augmented}generation of large language models,","venue":null,"work_id":"e758824f-f3e1-44da-b2c6-2873cea46798","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.092972Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:b560586f92f684161f543f7c6d6c4982b380558c600a5a72706d6510eccf5c38","observation_id":"1d671167-1bc3-4aad-b901-35efc656267a","resolution":{"observed_at":"2026-08-15T15:21:10.632447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.06850","last_updated":"2026-05-09T07:47:24Z","snapshot_observed_at":"2026-08-18T17:17:03.831800Z","submitted_at":"2025-07-09T13:54:58Z","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.06850","snapshot_observed_at":"2026-08-15T15:21:10.097661Z","title":"The dark side of llms: Agent-based attacks for complete computer takeover,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.097661Z"},"links":{"cited_paper":"/paper/2507.06850","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:9312fd731c236363ed66e3e5b9bdf78a50db9174de8732a075c012c60337ca53","observation_id":"c470a0e1-0f96-4143-adff-26ae77737033","resolution":{"observed_at":"2026-08-15T15:21:10.097661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.607316Z","title":"Trism for agentic ai: A review of trust, risk, and security management in llm-based agentic multi-agent systems,","venue":null,"work_id":"dd153d20-5862-4f96-8904-b942156844ad","year":2026},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.102843Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:d8536ffc48e871a11be184725887ee77668dfb2bdafc88846f9d323c9965133c","observation_id":"5c7f2d26-5329-49f3-be99-5d649822860c","resolution":{"observed_at":"2026-08-15T15:21:10.613142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02077","last_updated":"2026-04-29T10:47:33Z","snapshot_observed_at":"2026-08-14T09:14:00.327752Z","submitted_at":"2025-05-04T12:03:29Z","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02077","snapshot_observed_at":"2026-08-15T15:21:10.107915Z","title":"Open challenges in multi-agent security: Towards secure systems of interacting ai agents,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.107915Z"},"links":{"cited_paper":"/paper/2505.02077","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:938a880305917894631015b2d6da5694139b03c3d7813a0b5f8b2dd5700847ac","observation_id":"16b69702-f144-4a76-9b1f-60b8dd6f9511","resolution":{"observed_at":"2026-08-15T15:21:10.107915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.113080Z","title":"Ai agents under threat: A survey of key security challenges and future pathways,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.113080Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:0567b1ce3093f976e2036c9aee698007aa56ed8cdb29dc1d65ed94a6469e7aff","observation_id":"3a7de3e8-c61e-440d-a4d0-7444fa2e6e59","resolution":{"observed_at":"2026-08-15T15:21:10.113080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.117767Z","title":"The emerged security and privacy of llm agent: A survey with case studies,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.117767Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:8ed269db3e5733ebb52298851d827537c35d2c5c43c1232c55cab71cf81d78bd","observation_id":"6e71bfcf-8514-47b0-a6c7-9df787256ac9","resolution":{"observed_at":"2026-08-15T15:21:10.117767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.122785Z","title":"Formalizing and benchmarking prompt injection attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.122785Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:782f5b0fc96b8fcb0a4533b2c7725b7ca637e2c00e5716b29a5f685b663e531d","observation_id":"7713eb91-9e44-4cb3-8fae-bbbfeb5cf02b","resolution":{"observed_at":"2026-08-15T15:21:10.122785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.550920Z","title":"Agentdojo: A dynamic environment to evaluate prompt injection attacks and defenses for llm agents,","venue":null,"work_id":"4cb13419-7a59-446a-884d-1d1a259db86d","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.128824Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:67f895a60a59f6497f2980367a76012165b345284716fef606e8f6ceec94b8bc","observation_id":"3f8e5408-860e-4838-8009-ea9b2e915428","resolution":{"observed_at":"2026-08-15T15:21:10.556685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-15T15:21:10.136135Z","title":"Agent security bench (asb): Formalizing and benchmarking at- tacks and defenses in llm-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.136135Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:1f25995f94b260f8721b22f6e468b7a09e8d27b5ca4ee3ad1b93fd3387606fb0","observation_id":"16e07227-31ea-42d6-ab06-626635e65dcc","resolution":{"observed_at":"2026-08-15T15:21:10.136135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08638","last_updated":"2025-06-23T21:06:11Z","snapshot_observed_at":"2026-08-16T04:34:23.353569Z","submitted_at":"2025-05-13T14:55:31Z","title":"TRAIL: Trace Reasoning and Agentic Issue Localization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.08638","snapshot_observed_at":"2026-08-15T15:21:10.141337Z","title":"Trail: Trace reasoning and agentic issue localization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.141337Z"},"links":{"cited_paper":"/paper/2505.08638","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:748939d0406db4624e314b98f1da738699bab90fe0b6ce532018aee7c30c60f0","observation_id":"36c5ff14-0e72-461d-a2be-a9f61fbdf582","resolution":{"observed_at":"2026-08-15T15:21:10.141337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.534577Z","title":"Gpt-5 mini,","venue":null,"work_id":"4ba50061-8fd5-44ed-a3d3-4b2c3a410396","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.146788Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:93df0ac9d1cb004fbc1dec6d43ff7473b119cdcc46c0de44599a381987244c94","observation_id":"2705ec38-bc05-47ce-b692-4ba22db0802f","resolution":{"observed_at":"2026-08-15T15:21:10.539460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.508182Z","title":"Claude sonnet 4.5,","venue":null,"work_id":"ea3ba0fb-61bc-4317-a418-91f903d2327d","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.151796Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:45cb09e6d795cae1bbbef284fef3094d6c71082e8c2bd88120bb6fec0c50df6c","observation_id":"747392b1-ebb6-4342-8549-6fc2c0f8f762","resolution":{"observed_at":"2026-08-15T15:21:10.514039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.489781Z","title":"Kimi k2.5,","venue":null,"work_id":"bdec9bbb-cb7f-432e-a9b0-0404a40c47ce","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.156704Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:399a3e8b96e4efec6f126a564b1dc04d92e678be8c57b60d53df1e9fa51972f9","observation_id":"119ae632-4252-4263-b37c-d6b2316ba46c","resolution":{"observed_at":"2026-08-15T15:21:10.495478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.473138Z","title":"Practical byzantine fault tolerance,","venue":null,"work_id":"d1b8f2eb-7709-425d-a81f-6ade50dae3a2","year":1999},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.161477Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:c8439aaef2d0fda7c1eac05a47474a1e2801f82eeb5d668d62a85543f5676e0d","observation_id":"789da312-d8c1-4147-abb6-8a554a5255bd","resolution":{"observed_at":"2026-08-15T15:21:10.478284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08902","last_updated":"2024-08-12T11:33:45Z","snapshot_observed_at":"2026-08-16T13:27:03.447054Z","submitted_at":"2024-08-12T11:33:45Z","title":"Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08902","snapshot_observed_at":"2026-08-15T15:21:10.166487Z","title":"Audit-llm: Multi-agent collaboration for log-based insider threat detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.166487Z"},"links":{"cited_paper":"/paper/2408.08902","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:1056426586cfc5d7353e6e86e4bcc0c43f17bfcfec51e30329fa3c918649aaae","observation_id":"44ad6d21-94f7-47b1-b9c7-72acdf0a1d7b","resolution":{"observed_at":"2026-08-15T15:21:10.166487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.07791","last_updated":"2024-07-23T01:59:54Z","snapshot_observed_at":"2026-08-16T16:14:48.420207Z","submitted_at":"2024-07-10T16:08:46Z","title":"Flooding Spread of Manipulated Knowledge in LLM-Based Multi-Agent Communities","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.07791","snapshot_observed_at":"2026-08-15T15:21:10.172332Z","title":"Flooding spread of manipulated knowledge in llm-based multi-agent communities,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.172332Z"},"links":{"cited_paper":"/paper/2407.07791","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:2995c184caa1a06f56bb12bbe8c248a771ff449490896f49efc589044ca45b78","observation_id":"94092aae-9710-436a-8486-5647ef7e4673","resolution":{"observed_at":"2026-08-15T15:21:10.172332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.455733Z","title":"Secret collusion among ai agents: Multi- agent deception via steganography,","venue":null,"work_id":"349b0bd8-54d0-423b-9bd0-0520ec7c6552","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.177425Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:f2fec0d3e22e9d60119a604323f1448af859bb0245d30e6dabdbeee4309f9091","observation_id":"224bc76c-c2a3-4e1c-9444-032c718705c2","resolution":{"observed_at":"2026-08-15T15:21:10.462074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.438617Z","title":"Agents under siege: Breaking pragmatic multi-agent llm systems with optimized prompt attacks,","venue":null,"work_id":"c3f623e4-ea9b-4c9f-ac27-33aeb05e9375","year":2025},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.182557Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:5165f12463e9978ece646ad2f1db142dc870be7137406caea3a73270406b9e3f","observation_id":"09799ee7-bede-4133-a95f-4a22a85bdebd","resolution":{"observed_at":"2026-08-15T15:21:10.443889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:21:10.418093Z","title":"Psysafe: A comprehensive framework for psychological- based attack, defense, and evaluation of multi-agent system safety,","venue":null,"work_id":"6c11e8a3-70b0-4f7f-82cc-c5bced5d5e39","year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.187512Z"},"links":{"citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:97b9a1bb67c490d72b35f688f5eb07e3fe7ba42fbab9abc2b50b4cf5eef1afb8","observation_id":"91332909-a426-4871-a9df-4a28654b5784","resolution":{"observed_at":"2026-08-15T15:21:10.426117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.04783","last_updated":"2024-11-14T18:14:00Z","snapshot_observed_at":"2026-08-18T06:55:39.053097Z","submitted_at":"2024-03-02T16:52:22Z","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.04783","snapshot_observed_at":"2026-08-15T15:21:10.192438Z","title":"Autodefense: Multi-agent llm defense against jailbreak attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.192438Z"},"links":{"cited_paper":"/paper/2403.04783","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:c3bbfc4f8c0bf60113143b2059b506824138759ae2fd27fa604c26a4c09ef329","observation_id":"60b68910-3e3b-4683-ad27-bd0fb2648e82","resolution":{"observed_at":"2026-08-15T15:21:10.192438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.09023","last_updated":"2025-10-10T05:51:04Z","snapshot_observed_at":"2026-08-15T07:47:42.680001Z","submitted_at":"2025-10-10T05:51:04Z","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.09023","snapshot_observed_at":"2026-08-15T15:21:10.198301Z","title":"The attacker moves second: Stronger adaptive attacks bypass defenses against llm jailbreaks and prompt injections,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T15:21:10.198301Z"},"links":{"cited_paper":"/paper/2510.09023","citing_paper":"/paper/2608.00718"},"observation_digest":"sha256:938f165b2240e1bfda4bda1bb198067dc586a9b72755ffca0c221071c9d79c38","observation_id":"f7b82da2-f717-4841-88c5-1a53ad6b72f0","resolution":{"observed_at":"2026-08-15T15:21:10.198301Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.00718","last_updated":"2026-08-01T15:35:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T09:49:49.228988Z","submitted_at":"2026-08-01T15:35:58Z","title":"Adversarial Attacks in Multi-Agent LLM Pipelines: Unveiling Structural Vulnerabilities in Agentic AI Architectures"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":13},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2608.00718."}