{"as_of":"2026-08-09T15:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:30d07f9a8728df2ffd45df368e965ab2800c68752e2c7183f0db4349315f3611","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:59:40.856673Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02018/citation-record","integrity":"/paper/2608.02018/integrity","json":"/paper/2608.02018/citation-record.json","paper":"/paper/2608.02018"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2504.11281","last_updated":"2025-04-15T15:21:09Z","snapshot_observed_at":"2026-08-07T16:02:08.308014Z","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11281","snapshot_observed_at":"2026-08-07T00:59:39.211103Z","title":"arXiv:2504.11281","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.211103Z"},"links":{"cited_paper":"/paper/2504.11281","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:5e9dbe1f9e00eeb14379750d3d0e3fae78723e72894e8cb4cc67713416307de5","observation_id":"c6e545e5-2312-4aec-81e7-14b2b7e4ff67","resolution":{"observed_at":"2026-08-07T00:59:39.211103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-07T00:59:39.344088Z","title":"arXiv:2503.18813","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.344088Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:4b76ff07f4e823f6e26019e49948d00e5fb38b9acbea245aa4160c3e49a7a70d","observation_id":"fc0d42f9-143a-407f-b676-7447d1e75459","resolution":{"observed_at":"2026-08-07T00:59:39.344088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.13392","last_updated":"2026-06-11T14:23:41Z","snapshot_observed_at":"2026-08-06T06:40:14.278655Z","submitted_at":"2026-06-11T14:23:41Z","title":"MiniMax Sparse Attention","version":1},"cited_work":{"arxiv_id":"2606.13392","doi":null,"metadata_source":"pith","pith_arxiv_id":"2606.13392","snapshot_observed_at":"2026-08-07T00:59:41.081226Z","title":"MiniMax Sparse Attention","venue":"cs.AI","work_id":"293f063c-dee9-43d3-af0a-31e0fb57eacb","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.725796Z"},"links":{"cited_paper":"/paper/2606.13392","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:ea5a2687441e8854cd80505318a3d98278e52062152f03788198976fc84e1763","observation_id":"08299e70-a016-4e1f-bdb9-6758bdf1aeb1","resolution":{"observed_at":"2026-08-07T00:59:41.192533Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T23:24:16.398221Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.08586","snapshot_observed_at":"2026-08-07T00:59:39.874950Z","title":"arXiv:2502.08586","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.874950Z"},"links":{"cited_paper":"/paper/2502.08586","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:f907dd114475c584141423d697e63984ca60423575f049f2b882d688214f75ff","observation_id":"f9c7f59c-9fc1-4e6e-b474-ad1fb264f142","resolution":{"observed_at":"2026-08-07T00:59:39.874950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.08005","last_updated":"2026-04-09T09:08:40Z","snapshot_observed_at":"2026-08-07T10:15:18.025155Z","submitted_at":"2026-04-09T09:08:40Z","title":"Preference Redirection via Attention Concentration: An Attack on Computer Use Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.08005","snapshot_observed_at":"2026-08-07T00:59:40.104980Z","title":"Ruan, Y.; Dong, H.; Wang, A.; and et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.104980Z"},"links":{"cited_paper":"/paper/2604.08005","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:1f1e8aea47512d90e5bd8850ffc86a0ccf74fa7dc03f3550b1ba95aae91eead7","observation_id":"89b4951e-49b9-498b-b772-1d29271513d9","resolution":{"observed_at":"2026-08-07T00:59:40.104980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-07-06T21:10:09.129714Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-07T00:59:40.195526Z","title":"Singh, A.; Fry, A.; Perelman, A.; and et al","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.195526Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:7aa140cb853c2335d2aade912c7c263a460d07f2f08529b54a581e9859c9430e","observation_id":"eb1eaa77-93ae-4b68-aa3b-af0bbdc6e997","resolution":{"observed_at":"2026-08-07T00:59:40.195526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03267","last_updated":"2026-05-01T23:55:43Z","snapshot_observed_at":"2026-08-02T10:52:10.211700Z","submitted_at":"2025-12-19T07:05:38Z","title":"OpenAI GPT-5 System Card","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.03267","snapshot_observed_at":"2026-08-07T00:59:40.324404Z","title":"arXiv:2601.03267","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.324404Z"},"links":{"cited_paper":"/paper/2601.03267","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:1433217c1d551e499e77ead2be21a8df1286337f5f05f029eb3a35c509cd508b","observation_id":"bb09119b-add7-40e4-aa93-454e0da504d3","resolution":{"observed_at":"2026-08-07T00:59:40.324404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:42.003924Z","title":"InFindings of the Association for Computational Linguistics: ACL 2024, 10471–10506","venue":null,"work_id":"8845ea0f-21e2-449a-ac03-2780b31dd831","year":2024},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.695151Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:ed2abee402e51c30cf7dcd359732faa4c9975fa9a99f390e6c30f7b827f74495","observation_id":"68d6e4cf-ab8c-4183-b43e-f310b052f6e6","resolution":{"observed_at":"2026-08-07T00:59:42.133925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:41.755975Z","title":"InProceedings of the 63rd Annual Meeting of the Association for Compu- tational Linguistics (Volume 1: Long Papers), 8387–8401","venue":null,"work_id":"12c3b98f-725f-49f4-88ae-0c9b495baf3b","year":2024},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.856673Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:3028fcce8303a053fe0b7dc2fa0523a51c9e6bb1b0ef0cc8add89278c53624d4","observation_id":"a4234450-0f60-41cd-9218-02b95c1b94a7","resolution":{"observed_at":"2026-08-07T00:59:41.858013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:42.276457Z","title":"InFindings of the Association for Computa- tionalLinguistics:ACL2026,11986–11998.SanDiego,Cal- ifornia, United States: Association for Computational Lin- guistics","venue":null,"work_id":"ae65afe7-02be-4b34-b528-37a9ea31ac71","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.573665Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:17e83f89723e820b21c93f81e5dbd781e90d1952e39870d1f0391cfca6ba05b0","observation_id":"19deeb7a-d794-4f53-924a-7747ea87244c","resolution":{"observed_at":"2026-08-07T00:59:42.461591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:40.004103Z","title":"InProceed- ings of the 30th ACM International Conference on Multime- dia,MM’22,3185–3194.NewYork,NY,USA:Association for Computing Machinery","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.004103Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:8320a206d1d8cc8523ba9d4ab4ad3c567ae4ac61bbd58c7986f95fd38cd677a2","observation_id":"2090079e-44f3-46cf-9a7a-a44fab98e8a6","resolution":{"observed_at":"2026-08-07T00:59:40.004103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:43.043221Z","title":"InFindings of the Association for Computational Linguistics: EMNLP 2023, 2803–2821","venue":null,"work_id":"85f97b88-73f7-46df-b7a4-3983d74c1d66","year":2023},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.579504Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:7e3fa75a67f09eeabab3411b1b5e9e90c21bdcdd04dcdaa59ff50bc21bd4104e","observation_id":"a7341e7a-89d0-46d2-bb5d-f5c3ab5033d3","resolution":{"observed_at":"2026-08-07T00:59:43.212515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:42.629835Z","title":"InAdvances in Neural Information Processing Systems, volume 37, 52040–52094","venue":null,"work_id":"e3b9a7e4-61dd-40aa-a72e-9e2a839a90b5","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:40.428083Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:271ab03375c0ef15ba931d08ed2081eed2357c6a278105fe8d9f2ef5902a9176","observation_id":"a4c2b143-0641-481b-906c-feaccfe668e1","resolution":{"observed_at":"2026-08-07T00:59:42.849898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:59:39.120990Z","title":"arXiv:2504.14064","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.120990Z"},"links":{"citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:c14abc48af522c8dc1e3d77fe01151ede33322e345faa01142ecc5a74af2fd1e","observation_id":"8badb16f-e5e7-4198-8884-3c24f3e7d17b","resolution":{"observed_at":"2026-08-07T00:59:39.120990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.28116","last_updated":"2026-05-27T08:09:53Z","snapshot_observed_at":"2026-07-06T23:37:45.223562Z","submitted_at":"2026-05-27T08:09:53Z","title":"MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content","version":1},"cited_work":{"arxiv_id":"2605.28116","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.28116","snapshot_observed_at":"2026-08-07T00:59:41.334147Z","title":"MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content","venue":"cs.CR","work_id":"caca0bd5-7adc-45bc-863e-628da1cc8868","year":2026},"citing_paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents","version":2},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-07T00:59:39.457930Z"},"links":{"cited_paper":"/paper/2605.28116","citing_paper":"/paper/2608.02018"},"observation_digest":"sha256:dcb1a7bba7b627cea7eee86649129cd02ee16bfb81fb33220f2da82161c4ca3f","observation_id":"5c8e3839-ae4d-44ef-9dfe-7254b92435b5","resolution":{"observed_at":"2026-08-07T00:59:41.483092Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02018","last_updated":"2026-08-06T02:33:08Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T14:10:05.466439Z","submitted_at":"2026-08-03T10:16:53Z","title":"Invisible Ink Threats: Adversarial Goals Behind Legitimate Tasks in Computer-Use Agents"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":2,"verified_fuzzy":5},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2608.02018."}