{"as_of":"2026-08-10T04:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:791b73cb982bc4f182d3b7010394636a3864687287d3c1cb53b9a16a63ec9f76","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:12:27.078558Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.01558/citation-record","integrity":"/paper/2608.01558/integrity","json":"/paper/2608.01558/citation-record.json","paper":"/paper/2608.01558"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.569952Z","title":"2024.System architecture for the 5G System (TS 23.501)","venue":null,"work_id":"be44ec8c-a77c-44e4-bb8b-3e20c4e7ea8c","year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:22.866701Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:df25faadfd9635b2197fe21de70ebd2da2cafdd556949edf2794bfe7a96bb418","observation_id":"d90b0aef-fc35-4176-9847-d71e7c2998a8","resolution":{"observed_at":"2026-08-07T00:13:00.575025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.11327","last_updated":"2026-04-17T15:12:16Z","snapshot_observed_at":"2026-08-07T20:18:19.353329Z","submitted_at":"2026-02-11T19:58:23Z","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.11327","snapshot_observed_at":"2026-08-07T00:12:22.935267Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:22.935267Z"},"links":{"cited_paper":"/paper/2602.11327","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:edbbc684c195dcc812b2186ef48d75524e2a29cb78218d801461e49c52567e0e","observation_id":"508f4b3a-d805-4f3d-8234-47afce6c2e12","resolution":{"observed_at":"2026-08-07T00:12:22.935267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:23.018725Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.018725Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:e27b0413bbbbbe682c86abc27fa85d91dd4b8d328d435eaf3034eace05e3c94e","observation_id":"b7dfa417-2d66-441a-9b2b-2fb93ac7d73e","resolution":{"observed_at":"2026-08-07T00:12:23.018725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:23.119614Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.119614Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:93be4b3a5a8985378874a04e9b273ba487b18e2f8335cbe59bf7eeec7a52c434","observation_id":"7655f297-4550-4aee-b806-2a18b97ac2eb","resolution":{"observed_at":"2026-08-07T00:12:23.119614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.27299","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:58.716992Z","title":null,"venue":null,"work_id":"ff1b5138-18ec-4d30-a9df-a05bb6a46473","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.194415Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:3dd5b9fe144ebd7e3cf381c011fda351711aacff56f4da557f6c68f546055086","observation_id":"c3facac2-0e00-4c0c-aed9-bbd8c38eb557","resolution":{"observed_at":"2026-08-07T00:12:58.790971Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.12784","last_updated":"2024-07-17T17:59:47Z","snapshot_observed_at":"2026-08-09T05:58:40.075515Z","submitted_at":"2024-07-17T17:59:47Z","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.12784","snapshot_observed_at":"2026-08-07T00:12:23.283898Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.283898Z"},"links":{"cited_paper":"/paper/2407.12784","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ccf220a6335fe4e931f51a8dfafd707060dd57766bfc0132d1861285b7d1baba","observation_id":"f332cb43-44ed-47b3-bb15-2d598316e784","resolution":{"observed_at":"2026-08-07T00:12:23.283898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.541123Z","title":"2012.Computer Security Incident Handling Guide (NIST SP 800-61 Rev","venue":null,"work_id":"c97865b5-e9ee-4b7e-8b00-1782ff5686a1","year":2012},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.368163Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:9d0d4711a18733071171965c07bf2534aa328a5da8c46abf5d82064685061199","observation_id":"345b9450-26d8-49f5-97a3-22b13a5d5372","resolution":{"observed_at":"2026-08-07T00:13:00.545974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.527741Z","title":"2025.Securing AI Agents with Cisco’s Open-Source A2A Scanner","venue":null,"work_id":"b151bf91-6c6f-44d2-9ce4-29b2304e587f","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.430931Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:926a68d373279ae5445258a17ba63193228a4c3636afb692aff19927c85e5698","observation_id":"4982389e-3cb7-4eef-841b-8e46e62152cf","resolution":{"observed_at":"2026-08-07T00:13:00.531905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.513940Z","title":null,"venue":null,"work_id":"57e18549-34b9-4cde-a789-59d73218ac81","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.482516Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:4454bc1b519a76eb59677a661b4f54e2927d7c4c9836e9c44e1123d017c066c4","observation_id":"12a6028b-46e2-497f-9099-3e687c51ea92","resolution":{"observed_at":"2026-08-07T00:13:00.518070Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02817","last_updated":"2025-01-30T11:11:37Z","snapshot_observed_at":"2026-08-07T20:57:52.378876Z","submitted_at":"2024-03-05T09:37:13Z","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02817","snapshot_observed_at":"2026-08-07T00:12:23.578617Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.578617Z"},"links":{"cited_paper":"/paper/2403.02817","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:080a0f93c8f47a1134c99aeaab04f8f85ce7d73cc09b147e82891114ee9ebc55","observation_id":"a7a7e11a-186f-4033-a1fb-0de4a6ce2a25","resolution":{"observed_at":"2026-08-07T00:12:23.578617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-02T13:42:34.526072Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2510.23883","snapshot_observed_at":"2026-08-07T00:12:23.625640Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.625640Z"},"links":{"cited_paper":"/paper/2510.23883","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:bd555cc1abb5cfe0d7fc912995f2278f0a535a237bc8c0a9f89a99f3c2522a8f","observation_id":"b560053b-4adf-47e6-85ef-147adec35fd9","resolution":{"observed_at":"2026-08-07T00:12:23.625640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T00:12:23.711741Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.711741Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:cad25d7e3de9d7f24b72aace68cd71a673eca0e5c7ff0c7d99aff4eef51d7ad6","observation_id":"752afc91-068b-4e94-8e2c-55e86530c623","resolution":{"observed_at":"2026-08-07T00:12:23.711741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-07T00:12:23.784463Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.784463Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:15cafd92ac7a99b157b3f7a86244f7270fa93455d2c0a72e36e29a4390448def","observation_id":"0d707773-6112-4200-91d1-82a20796ddbe","resolution":{"observed_at":"2026-08-07T00:12:23.784463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.02279","last_updated":"2025-05-23T00:28:09Z","snapshot_observed_at":"2026-08-07T15:56:34.289224Z","submitted_at":"2025-05-04T22:18:27Z","title":"A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.02279","snapshot_observed_at":"2026-08-07T00:12:23.867036Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.867036Z"},"links":{"cited_paper":"/paper/2505.02279","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:28ff94c05c8571360655aa0b11506b3ebf61ac50d3439bb1559114238147341f","observation_id":"0f5ac053-9f9d-4e43-b4f2-62f43889da4c","resolution":{"observed_at":"2026-08-07T00:12:23.867036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.499422Z","title":"2018.MiFID II Articles 17 and 21; RTS 6 Algorithmic Trading","venue":null,"work_id":"26388d8e-7d34-4c4e-8bf2-139ab8dd97a2","year":2018},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:23.980376Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:4196b28b3d51e7de79d0626cc045cd43a9bf2e54eb22e1237c6421402f624466","observation_id":"ed5b273b-06c8-40a4-81ea-7e1a09c5f7d9","resolution":{"observed_at":"2026-08-07T00:13:00.503952Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:24.077540Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.077540Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fd774ff679bd2244fa64ea76a622f485eb34c8a72cdfe8a9a2a96c78f43cee58","observation_id":"76b2a1c9-1e9e-4e20-9bc0-1a529b3408ad","resolution":{"observed_at":"2026-08-07T00:12:24.077540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"ba-p/1235996","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:58.509313Z","title":"2025.Safeguarding AI Agents: An In-Depth Look at A2A Protocol Risks","venue":null,"work_id":"9f6435bb-f4bd-4486-96e3-6a90b3e41bff","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.177719Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:0cfc4a1fa45b0bc1f914f4731c2b2bb26bfc7c4b95ef9390ce3a79ec24b2be95","observation_id":"a97c45a7-0929-471c-ab3a-90dd132c3903","resolution":{"observed_at":"2026-08-07T00:12:58.569959Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.485425Z","title":null,"venue":null,"work_id":"33e8aa81-b445-45e4-887a-8bfdfe0878f7","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.249778Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:a1d1f2d6faf80bf816b570a19d03e8da4479062fd74768dc02758224ff76e867","observation_id":"b4d4b2f8-ca56-4a56-b4a8-c9e594d47e4d","resolution":{"observed_at":"2026-08-07T00:13:00.489856Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.470504Z","title":"2023.HL7 FHIR Release 5: Workflow Module","venue":null,"work_id":"3ffbb6a9-be2b-48cd-a2f6-fa32b8b918ac","year":2023},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.312520Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ed6c9bf2f7e966ee6c8eaec7ade59949536c1d93f4f4e077a1f6e9f958120a80","observation_id":"3fb1543d-b560-4271-9859-6410d51c2893","resolution":{"observed_at":"2026-08-07T00:13:00.474737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.15579","last_updated":"2026-07-05T22:49:32Z","snapshot_observed_at":"2026-07-12T19:40:44.614247Z","submitted_at":"2026-04-16T23:18:22Z","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.15579","snapshot_observed_at":"2026-08-07T00:12:24.400080Z","title":"Timperley, and Christian Kästner","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.400080Z"},"links":{"cited_paper":"/paper/2604.15579","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:256b7121551c32de0eb6a8d6542e705195510ae7f34a66954e860de46fbe5cfe","observation_id":"096cf875-d7a9-4935-94c6-3b4e673fa876","resolution":{"observed_at":"2026-08-07T00:12:24.400080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.23995","last_updated":"2026-05-23T04:11:51Z","snapshot_observed_at":"2026-08-03T13:34:24.241754Z","submitted_at":"2025-12-30T05:24:26Z","title":"RepetitionCurse: Measuring and Understanding Router Imbalance in Mixture-of-Experts LLMs under DoS Stress","version":2},"cited_work":{"arxiv_id":"2512.23995","doi":null,"metadata_source":"pith","pith_arxiv_id":"2512.23995","snapshot_observed_at":"2026-08-07T00:12:58.322096Z","title":"RepetitionCurse: Measuring and Understanding Router Imbalance in Mixture-of-Experts LLMs under DoS Stress","venue":"cs.CR","work_id":"d97f9a4e-1bb6-4e1a-bc23-418aab4015a8","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.458193Z"},"links":{"cited_paper":"/paper/2512.23995","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:b90bdf3baad63c4a152c69e63039a743b998960e4f0bcf7d46305f7016eb2872","observation_id":"52e314d6-b13d-4526-b304-b05bfdc6b52e","resolution":{"observed_at":"2026-08-07T00:12:58.362037Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.454289Z","title":null,"venue":null,"work_id":"ece9efa4-adec-49de-b67a-2c83d6df81e0","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.525702Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:1fe9266bf7d25b72ab1a264db3763fab8084e3ae71bba13517ee4227a546b4d9","observation_id":"456f57e7-6c97-4e49-ae3e-09d5ecce964c","resolution":{"observed_at":"2026-08-07T00:13:00.459263Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2512.23738","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:42.638434Z","title":null,"venue":null,"work_id":"bf2b3ab3-2bb8-4763-a947-c8f75e3d60a5","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.577229Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:93d160259a25236da4eccc86f0b1a26e65e1f87efcdc4a1de5bdfa55986c718d","observation_id":"e610b514-8243-471d-b14b-65abcb25fd59","resolution":{"observed_at":"2026-08-07T00:12:42.649877Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T00:38:23.170067+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-10T00:38:23.170067+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-10T00:38:23.170067+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.438042Z","title":"2025.Potential Attack Surfaces in Agent2Agent (A2A) Protocol","venue":null,"work_id":"095d221c-29b8-4930-999e-a5138d1fdcdb","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.663366Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:a0b1bacbf06c9a498a6310e8ce62dd5b1f8e729bececaed2d6719c0fc47ccac4","observation_id":"663c4715-075b-4a8b-933e-70c67598f1ee","resolution":{"observed_at":"2026-08-07T00:13:00.442944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:24.716939Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.716939Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:20dcde5d29e15d5082768f463988c888e2e667ca0799889cc5a60e6a9fd335d5","observation_id":"71f63925-21cb-4534-a09f-99c0f9fa8664","resolution":{"observed_at":"2026-08-07T00:12:24.716939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-032-16092-8_28","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:03:56.115653Z","title":null,"venue":"Lecture notes in computer science","work_id":"76541ad4-a75a-432b-bf5d-7fd0439a852e","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.780186Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:2ade77882a5ad557ee06bbb1510c44f38b71c9b67de6a099c209703b9fa4ec04","observation_id":"78243060-5fa4-4890-ae64-9c6f4248e067","resolution":{"observed_at":"2026-08-07T00:12:42.470683Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.422788Z","title":"2025.ACP Joins Forces with A2A Under the Linux Foundation’s LF AI & Data","venue":null,"work_id":"27e471f8-6733-4643-a6b8-8129bc71637f","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.838712Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ddbdb305817cecb4ce59420d06c2f01335f2ad7e466ead19b23cc07a837834bf","observation_id":"eb452181-ee18-4f62-b1ca-0d1bae3a2c5b","resolution":{"observed_at":"2026-08-07T00:13:00.427440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.08704","last_updated":"2025-03-09T06:00:35Z","snapshot_observed_at":"2026-08-07T17:19:25.643570Z","submitted_at":"2025-03-09T06:00:35Z","title":"Life-Cycle Routing Vulnerabilities of LLM Router","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.08704","snapshot_observed_at":"2026-08-07T00:12:24.911258Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.911258Z"},"links":{"cited_paper":"/paper/2503.08704","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ebc77e688eb6bdda187a78b1ce289b4bd9e7747e3d9bc128d220013f56177f75","observation_id":"6fde1e6d-e018-42c1-87af-c49f61f02043","resolution":{"observed_at":"2026-08-07T00:12:24.911258Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.405508Z","title":null,"venue":null,"work_id":"a56141fc-7911-4b4f-9f41-7efee46abf58","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:24.980670Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:1a131369e1cdb922a7fb4dea48224265d23e0c126346948e03ef85763501d602","observation_id":"77a0b4f7-0765-4890-b4a2-52ac4e864081","resolution":{"observed_at":"2026-08-07T00:13:00.411614Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.386386Z","title":null,"venue":null,"work_id":"c471c60d-11d4-4724-85f8-3e3d01ae0133","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.015079Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:140248f3479d67a1d58de220d9ed1c4ddd5ef22ac548d10e82c675176f155b1e","observation_id":"87e5d589-ed43-460a-8cb5-72f0bc6e0714","resolution":{"observed_at":"2026-08-07T00:13:00.392032Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:25.092502Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.092502Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:7127ceb5549891056dd9cc1a1da4b7b5e0783c4668956c0724473cfb07521673","observation_id":"cf032acd-a091-4d9c-909e-04c7a881af85","resolution":{"observed_at":"2026-08-07T00:12:25.092502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.09002","last_updated":"2026-04-26T14:13:48Z","snapshot_observed_at":"2026-07-06T22:48:26.306802Z","submitted_at":"2026-03-09T22:46:27Z","title":"Security Considerations for Multi-agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.09002","snapshot_observed_at":"2026-08-07T00:12:25.164426Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.164426Z"},"links":{"cited_paper":"/paper/2603.09002","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:2dbb1b687343a96af08d680493f5c0ae0ca559ad72c05a0635c87e6e38ce9128","observation_id":"60075151-2517-4ac8-ac33-6151af36fca9","resolution":{"observed_at":"2026-08-07T00:12:25.164426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.360537Z","title":null,"venue":null,"work_id":"8f23bead-15b8-4287-bedb-c0d5c05e0520","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.236137Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:f6aa24c8a0080d45a948ce586bc40a607c5a158ad72df9bb69df29a87ff01b43","observation_id":"7ed7363c-916d-4dcb-9bbd-887ab9a97125","resolution":{"observed_at":"2026-08-07T00:13:00.371119Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.342295Z","title":null,"venue":null,"work_id":"e72cd7e0-b302-43c4-903c-929547b5eb4e","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.300553Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ad84a0b5d73c1416720cb32eb36ce2837924d81dff9f64946b6d27c77ea8286d","observation_id":"544baad3-4d8c-42f8-a7f7-8094c98cfb95","resolution":{"observed_at":"2026-08-07T00:13:00.347754Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.323361Z","title":null,"venue":null,"work_id":"ccd91dfa-ac1e-4aaf-aafb-cbb435c760c6","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.386968Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:603ef37813978b9bdeadedfd6d2801e31f1d7ebca5b49ef2319567bfa67572b5","observation_id":"6c6d1120-29b5-4128-9578-f9c013ce9061","resolution":{"observed_at":"2026-08-07T00:13:00.331578Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.300345Z","title":null,"venue":null,"work_id":"fd785b5c-4dbb-4776-b002-40545c6a9e0f","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.453517Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:0314affc0e873effd849169378737604b247c8cae60fb75a27a8432db17be109","observation_id":"3b43a8ba-78a0-4810-96b4-396a523c4364","resolution":{"observed_at":"2026-08-07T00:13:00.307043Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.11418","last_updated":"2026-05-12T02:11:54Z","snapshot_observed_at":"2026-07-06T23:23:16.461539Z","submitted_at":"2026-05-12T02:11:54Z","title":"Under the Hood of SKILL.md: Semantic Supply-chain Attacks on AI Agent Skill Registry","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.11418","snapshot_observed_at":"2026-08-07T00:12:25.516024Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.516024Z"},"links":{"cited_paper":"/paper/2605.11418","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:50ca9df11226290e81809bc5370636d8299c09166272b7862c722806772123dd","observation_id":"5c4db43f-afef-4d0f-bc0e-1af3fed63b7b","resolution":{"observed_at":"2026-08-07T00:12:25.516024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:13:00.175312Z","title":"2026.A2A Protocol Security: Authenticating Agent-to-Agent Communi- cation","venue":null,"work_id":"37b85769-3f37-4797-a250-3d260f7f2456","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.610975Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:747f43a599d80cdc3f4981b5ebece8149eab136218eeecbb3995c6417c7c1f03","observation_id":"75121b02-8aed-4888-91cd-87613c0d45a6","resolution":{"observed_at":"2026-08-07T00:13:00.272211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.916353Z","title":null,"venue":null,"work_id":"6fccf71b-b5db-40cf-916c-8d98e612949e","year":null},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.686470Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:6021489af959cb51ef01c8a2b8c2fc6f0c0b8d7c9a8c2fcc8f3a1b5df3ec98ce","observation_id":"446a917b-4392-4785-8152-6b8b809c6b60","resolution":{"observed_at":"2026-08-07T00:13:00.036365Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-01T07:24:09.967062Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19793","snapshot_observed_at":"2026-08-07T00:12:25.831378Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.831378Z"},"links":{"cited_paper":"/paper/2504.19793","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:cd3a1814426d2704d1912a85ad1c012271f4938651a0e879c4f02d8c8dc368cd","observation_id":"6d5755eb-7184-4249-bc1f-95add8c6fd6c","resolution":{"observed_at":"2026-08-07T00:12:25.831378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-07T00:12:25.895446Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.895446Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:56740a61233c454a8de7eb610fb514d49bc4c20e54f06bc6d428f1eb91d5078c","observation_id":"32663088-c234-4639-84e0-42d246b24447","resolution":{"observed_at":"2026-08-07T00:12:25.895446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.15022","last_updated":"2026-04-16T13:51:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-16T13:51:48Z","title":"Route to Rome Attack: Directing LLM Routers to Expensive Models via Adversarial Suffix Optimization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.15022","snapshot_observed_at":"2026-08-07T00:12:26.015766Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.015766Z"},"links":{"cited_paper":"/paper/2604.15022","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:59c70ad874afa79d9435145f67e517f12aabd23c3bf0ae5ae4bb0869b4e7992c","observation_id":"ed50bcb4-1f05-445a-b2ce-2b59540e69d4","resolution":{"observed_at":"2026-08-07T00:12:26.015766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.687833Z","title":"2025.Linux Foundation Announces the Forma- tion of the Agentic AI Foundation (AAIF)","venue":null,"work_id":"84c39d9d-9220-48d1-aebd-43e421b021bf","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.121588Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fc3acb9adbce4a4710234cea34afe44b31bdf34098a1f439d0ddf28382c596bb","observation_id":"57a63382-f3dc-43ee-8317-8b52ef0cdab6","resolution":{"observed_at":"2026-08-07T00:12:59.835938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.163967Z","title":"2025.Linux Foundation Launches the Agent2Agent Protocol Project to Enable Secure, Intelligent Communication Between AI Agents","venue":null,"work_id":"01be303c-64ce-45d0-ac70-1f18fc47ba70","year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.296684Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:570302d72440cec3da6e214b5f9d7b1a52fc58b4e1069a58af1bbd340d2cfe55","observation_id":"8679f679-8ad9-410a-8543-f962ff3dd360","resolution":{"observed_at":"2026-08-07T00:12:59.269986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:59.391386Z","title":null,"venue":null,"work_id":"4aba34e9-77dc-4669-881d-7c9d8114d0e1","year":null},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.211036Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:e257a6b0ac130a63e090a142716ac717d4bb6b39d24bc1207e39ee50fa2c94bc","observation_id":"21ad1643-490a-4954-a7ff-b87eb2d7bfad","resolution":{"observed_at":"2026-08-07T00:12:59.543610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18666","last_updated":"2025-07-31T04:00:48Z","snapshot_observed_at":"2026-07-06T20:57:47.748881Z","submitted_at":"2025-03-24T13:31:48Z","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18666","snapshot_observed_at":"2026-08-07T00:12:26.491944Z","title":"Poskitt, and Jun Sun","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.491944Z"},"links":{"cited_paper":"/paper/2503.18666","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fa9495319352094b39ca5b1868f24dc8824a5258996d918895c0c74e0c9a1038","observation_id":"84c6b314-84ef-488c-8ddd-afc663ba51d0","resolution":{"observed_at":"2026-08-07T00:12:26.491944Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:58.934356Z","title":null,"venue":null,"work_id":"69dd1193-9eba-4d97-b483-2d5960e6bb35","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.391388Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:860ce0dc236f01e3a3e0e0eed09e97ed59b51a5b1dd3be8a8049cbc69de39db1","observation_id":"30284983-2ca0-436a-9563-ea2437dc1589","resolution":{"observed_at":"2026-08-07T00:12:59.017385Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:26.677481Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.677481Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:74782d4bdff15a62f280e44e35da8690a695d918c1c06bd2c81eb1bbe090414c","observation_id":"36cfab86-09f9-4d41-beae-26d34d1865e7","resolution":{"observed_at":"2026-08-07T00:12:26.677481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.00500","last_updated":"2026-08-03T00:31:29Z","snapshot_observed_at":"2026-08-08T19:29:44.414464Z","submitted_at":"2025-08-01T10:24:47Z","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.00500","snapshot_observed_at":"2026-08-07T00:12:26.587196Z","title":"Poskitt, Jiali Wei, and Jun Sun","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.587196Z"},"links":{"cited_paper":"/paper/2508.00500","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fcc7b624617388bfb9de4b7cf4490bf2229edd799ada16932c9dfec47cc39826","observation_id":"1867f1c6-7164-4a3b-ad41-b75d7b65c53e","resolution":{"observed_at":"2026-08-07T00:12:26.587196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22884","last_updated":"2024-10-30T10:25:35Z","snapshot_observed_at":"2026-08-09T12:08:38.473092Z","submitted_at":"2024-10-30T10:25:35Z","title":"Stealing User Prompts from Mixture of Experts","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22884","snapshot_observed_at":"2026-08-07T00:12:26.839942Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.839942Z"},"links":{"cited_paper":"/paper/2410.22884","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:85c7a6f3383849d74a76871c5d6499679024b6661e65b2d290504db1b2255adf","observation_id":"b46de631-1721-4aa0-8f88-30252ed74380","resolution":{"observed_at":"2026-08-07T00:12:26.839942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.02946","last_updated":"2026-05-01T11:54:55Z","snapshot_observed_at":"2026-07-31T02:35:59.178763Z","submitted_at":"2026-05-01T11:54:55Z","title":"RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.02946","snapshot_observed_at":"2026-08-07T00:12:26.741411Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.741411Z"},"links":{"cited_paper":"/paper/2605.02946","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:d80d2744e8884939b327c7ecfa306fb91135a0d10b2e6cfe2b5fae9f2b706b0d","observation_id":"6b32b77d-b644-4426-be8a-c43df23e9368","resolution":{"observed_at":"2026-08-07T00:12:26.741411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:27.004844Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:27.004844Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:9c4ab4832a71abd376c910b67149484e87b29f0b4c3d99aaed52d0db73dda4fd","observation_id":"6baedb92-ac0c-4dd5-a071-338cecee1a3b","resolution":{"observed_at":"2026-08-07T00:12:27.004844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.21380","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:12:42.984307Z","title":null,"venue":null,"work_id":"01e84f68-dc50-48bb-b50a-ef1a6a753077","year":2026},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:26.925470Z"},"links":{"citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:fdb828cfe5153159d960c895c7f33b9432824c2ae94a7a1ca677d47a8a864a4a","observation_id":"364c5f77-8357-4899-aab5-bf48bd693a52","resolution":{"observed_at":"2026-08-07T00:12:42.992528Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-07-06T17:29:05.185768Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T00:12:27.078558Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:27.078558Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:acf25cc26ff619743dcfffe2f841227ef2b0781ac3159d3f1f5b219491f31ee1","observation_id":"b762fbc8-2f22-4c04-afaf-36ca9dbed0c2","resolution":{"observed_at":"2026-08-07T00:12:27.078558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.01818","last_updated":"2025-01-03T14:03:14Z","snapshot_observed_at":"2026-08-09T18:21:48.866757Z","submitted_at":"2025-01-03T14:03:14Z","title":"Rerouting LLM Routers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.01818","snapshot_observed_at":"2026-08-07T00:12:25.735180Z","title":"InConference on Language Modeling (COLM)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:25.735180Z"},"links":{"cited_paper":"/paper/2501.01818","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:145cd8d46af8afcf55d29b43d3f9c8e4d7fbad776c3d7bf38a0f7a22d804f6cd","observation_id":"08950bca-1daa-4dde-8a86-4f1e282ff083","resolution":{"observed_at":"2026-08-07T00:12:25.735180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-09T23:02:26.704826Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":39,"verified_exact":6,"verified_fuzzy":10},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2608.01558."}