{"as_of":"2026-08-09T17:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:493c4d386d2d03c8614e00d38c2598a0ee0b351d7d533f0578d0c969da512f51","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T05:44:24.854509Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02518/citation-record","integrity":"/paper/2608.02518/integrity","json":"/paper/2608.02518/citation-record.json","paper":"/paper/2608.02518"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.170465Z","title":"Evaluating prompt injection safety in large language models using the promptbench dataset","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.170465Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:418eaa14300f216ec6027566373180fa9d41b420406d2545ea8d58a7a2398b68","observation_id":"c6f47370-662a-4d34-81a1-5149bd762a99","resolution":{"observed_at":"2026-08-04T05:44:22.170465Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.15221","last_updated":"2024-09-04T00:58:59Z","snapshot_observed_at":"2026-07-06T19:06:41.697671Z","submitted_at":"2024-08-27T17:33:30Z","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.15221","snapshot_observed_at":"2026-08-04T05:44:22.263222Z","title":"Llm defenses are not robust to multi-turn human jailbreaks yet","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.263222Z"},"links":{"cited_paper":"/paper/2408.15221","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:5e5a1aac08efab9a966b9b63e4d1b9ee912e1653e938362e59dbb047a74e6a54","observation_id":"fb46f4d2-7cbb-4a41-ab8f-5d17ec9f892c","resolution":{"observed_at":"2026-08-04T05:44:22.263222Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.302044Z","title":"Multibreak: A scalable and diverse multi-turn jailbreak benchmark for stress-testing LLM safety","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.302044Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:ae96f42883ce2d7fcce2c96e5ee5b4deea27cba90f4d5ae7143737d2f189bf10","observation_id":"96b3ca58-3642-4c51-a3ba-a1816cf1c744","resolution":{"observed_at":"2026-08-04T05:44:22.302044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.336876Z","title":"Safe in isolation, dangerous together: Agent-driven multi-turn decomposition jailbreaks on llms","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.336876Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:7e366d7ded1bcb249f10c56d677f45525ace462d3cfaf98f25c8752629dcded6","observation_id":"f285f93e-d0ca-4895-8c72-08ec0bc3b683","resolution":{"observed_at":"2026-08-04T05:44:22.336876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.13379","last_updated":"2026-06-10T21:28:47Z","snapshot_observed_at":"2026-08-08T14:12:41.932086Z","submitted_at":"2026-02-13T18:38:18Z","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.13379","snapshot_observed_at":"2026-08-04T05:44:22.374592Z","title":"Unsafer in many turns: Benchmarking and defending multi-turn safety risks in tool-using agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.374592Z"},"links":{"cited_paper":"/paper/2602.13379","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:f0fc8e7acd4869b6800c9f2d1c1cc72ba81826c75dc690d8d445b0637dd79d80","observation_id":"d5549ca9-54e3-4376-af67-28df942e37cd","resolution":{"observed_at":"2026-08-04T05:44:22.374592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.439364Z","title":"Deepcontext: Stateful real-time detection of multi-turn adversarial intent drift in llms","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.439364Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:3bd76fdd69f7666427f65d83bcaa91ff9d325bd93c59d8db3e2faefe6273ce41","observation_id":"37bc05b3-6e15-4b9c-86f2-f5450bd67a2e","resolution":{"observed_at":"2026-08-04T05:44:22.439364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.473357Z","title":"Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.473357Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:6e8001f8a2f9e74a6b9a19bec458b377a2da1f16d1d62f9bbb775d4badcbcd15","observation_id":"bd69103a-2ece-46e5-b66c-55b505d2b78e","resolution":{"observed_at":"2026-08-04T05:44:22.473357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.508380Z","title":"Automating Deception: Scalable Multi-Turn LLM Jail- breaks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.508380Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:214cc33d1ea030a305b57c0cf675897e65edf463a83a4e76013e337406a5ef43","observation_id":"54aa412e-4531-4c09-ba9e-81d97188a16d","resolution":{"observed_at":"2026-08-04T05:44:22.508380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.21131","last_updated":"2026-04-22T22:40:31Z","snapshot_observed_at":"2026-07-06T23:07:47.244208Z","submitted_at":"2026-04-22T22:40:31Z","title":"Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.21131","snapshot_observed_at":"2026-08-04T05:44:22.537750Z","title":"Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.537750Z"},"links":{"cited_paper":"/paper/2604.21131","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:7d8aee5162881e4776435e16f275ff73ffc9f66b03722c141fd99bda1dc2ea99","observation_id":"3ed7e0a5-b13c-4751-bc68-5f53ba788791","resolution":{"observed_at":"2026-08-04T05:44:22.537750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.03952","last_updated":"2026-05-05T16:38:23Z","snapshot_observed_at":"2026-08-02T23:44:35.161198Z","submitted_at":"2026-05-05T16:38:23Z","title":"MOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.03952","snapshot_observed_at":"2026-08-04T05:44:22.582902Z","title":"MOSAIC-Bench:MeasuringCompositionalVulnerabilityInduction in Coding Agents","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.582902Z"},"links":{"cited_paper":"/paper/2605.03952","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:933bbb3d41a71d8ffd18418e3d2338ced8d884f83dc86af7ed9b15545c71b7cb","observation_id":"d38f8fd3-a982-4b07-85fd-76e8fcb6e84c","resolution":{"observed_at":"2026-08-04T05:44:22.582902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.629437Z","title":"Kairos: Practical intrusion detection and investigation using whole-system prove- nance","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.629437Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:9ef06f03ccbf412aa4ee705166c77e7c4984fc9e184ee8f43ca3dd7cc33dfc74","observation_id":"46371704-e4e9-4200-810f-418e988a8f1e","resolution":{"observed_at":"2026-08-04T05:44:22.629437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.713260Z","title":"Detection and mitigation of slow DoS attacks using machine learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.713260Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:3da8abe017c37ab24f4288d96440f78ed35ce9facc0f3c0f8faf4fbfa405a739","observation_id":"ad0972d8-6086-410f-b9eb-ac54880b8290","resolution":{"observed_at":"2026-08-04T05:44:22.713260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.750171Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.750171Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:fe91d201082ef6feebd9597c20bbfb149e99c05fb4243ada78dc35ea0d48bf50","observation_id":"658a82a4-c714-4e94-92ce-845d2b2532d2","resolution":{"observed_at":"2026-08-04T05:44:22.750171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.10719","last_updated":"2023-07-20T09:25:02Z","snapshot_observed_at":"2026-08-07T03:36:52.924251Z","submitted_at":"2023-07-20T09:25:02Z","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.10719","snapshot_observed_at":"2026-08-04T05:44:22.843255Z","title":"Llm censorship: A machine learning challenge or a computer security problem?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.843255Z"},"links":{"cited_paper":"/paper/2307.10719","citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:08c7c91918eefce5cc60e060dc901931adf85dc7f072539e8e2b021296f65810","observation_id":"68e49eda-0cbc-4d03-9204-77c61dc16605","resolution":{"observed_at":"2026-08-04T05:44:22.843255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:22.927979Z","title":"Breach By A Thousand Leaks: Unsafe Information Leakage in’Safe’AI Re- sponses","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:22.927979Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:5e9d3524fb540024d11d39079a125d9b32a1fd5e243d748e6378cf10156fc508","observation_id":"7d14b3be-1e2a-4c68-b384-a10a855a536d","resolution":{"observed_at":"2026-08-04T05:44:22.927979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.023247Z","title":"Wildchat: 1m chatgpt interaction logs in the wild","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.023247Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:c1d81f4929a60eb0dc1ed21740eacaf3542f27b66f84fd8516e6de3b868c099d","observation_id":"a876a816-6eb7-42ea-b214-d648e056211a","resolution":{"observed_at":"2026-08-04T05:44:23.023247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.079979Z","title":"A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.url:https : / / attack","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.079979Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:a851616b873d5913f9093a19a40d40ce79ae2cdcbd1a1d83384b613631c9db35","observation_id":"46ab60fe-d77c-40f1-a904-f984e1752353","resolution":{"observed_at":"2026-08-04T05:44:23.079979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.169949Z","title":"Dual-usecapabilitiesofconcernofbiologicalAImodels","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.169949Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:78ad07716e490f4127d730c3835c18299877deefb6f9e4b8274dcf0d309b3e6f","observation_id":"b1fbb827-0c10-4aa9-b3b2-efe0062c5b8b","resolution":{"observed_at":"2026-08-04T05:44:23.169949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.301879Z","title":"It Is the Journey, Not the Destination: Moving From End Points to Trajectories When Assessing Chatbot Mental Health Safety","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.301879Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:f0e2299d357b7b17ad297d90f6c7f302130ad29725aee9a2534def698b403688","observation_id":"ca514473-6e89-4592-8d77-6301139aae37","resolution":{"observed_at":"2026-08-04T05:44:23.301879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.416659Z","title":"The agent searches for a target individual and infers their email address based on their organizational affiliation","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.416659Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:47b2f0add34f242a81f12cc8982b166f13b2c39e136232d7e95d96f3a496ac8d","observation_id":"6937a851-8de5-4d43-9a58-145197d2092f","resolution":{"observed_at":"2026-08-04T05:44:23.416659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.483633Z","title":"background-color: yellow; color: black; text-align: center; padding: 10px; font-weight: bold","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.483633Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:9a173f6f6f192e3624de8ec6af004cb5fe0241d393d15f94b2c02010b63153e1","observation_id":"300d2bbf-7d16-4253-9ee1-f70806466500","resolution":{"observed_at":"2026-08-04T05:44:23.483633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.603489Z","title":"The agent drafts a password-reset email addressed to the target email discovered in step 1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.603489Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:9511559729d32dc03a4c2b2cb860a82f87a53ca3d3892dba7bacaf7c0c610838","observation_id":"6d3dd604-f864-45c2-bf1b-5345bdaa47be","resolution":{"observed_at":"2026-08-04T05:44:23.603489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.664186Z","title":"The agent is tasked with reviewing the landing page and removing any demo or placeholder content (specifically, the banner injected in step 2)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.664186Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:e74453a55644c0daa730000891f787a4cc7e00f4ad7fb194730570fe0473edf9","observation_id":"35e946f4-49b9-4bbb-bfe6-fb56e8e31fd4","resolution":{"observed_at":"2026-08-04T05:44:23.664186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.703087Z","title":"The agent inserts a hyperlink to the phishing page from step 4 into the email drafted in step 3","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.703087Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:6a11a7d9b0ab77e8f2974bee3d4ebe4981fc62b6fa201fe4df3ec9b31e443a38","observation_id":"cc8b69d1-fc42-4420-b708-9dea735eac7f","resolution":{"observed_at":"2026-08-04T05:44:23.703087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.750770Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.750770Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:c0f2ccd9a55b91a10b226178b70830441ddc2fe7070fd87896c84ee9becb593b","observation_id":"c7798f0a-58dd-4d3a-9ac0-ec6f65e2f3f6","resolution":{"observed_at":"2026-08-04T05:44:23.750770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.814355Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.814355Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:f2b627a07fd6dbd476617e62f6e695590d75771dd02135b5e77f01315a8f398d","observation_id":"4a5c4dbe-3275-4de6-9585-3761c32d68c8","resolution":{"observed_at":"2026-08-04T05:44:23.814355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.847645Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.847645Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:83854a315078fe19fc1ff81369b3132ad90b3b9e61d5465d5adfe26d40166fd0","observation_id":"9acd0158-84ec-483f-ae95-a912638f6f05","resolution":{"observed_at":"2026-08-04T05:44:23.847645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.907156Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.907156Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:6967f89d0ebd0e13853358d8ccba7705ff521e2779c7cef5502551cdbbfb0729","observation_id":"5ae6ad9a-ed95-4164-b651-2b8a3224f64e","resolution":{"observed_at":"2026-08-04T05:44:23.907156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:23.994322Z","title":"demo\" or","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:23.994322Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:900445614f1ba11b8e060409ab62d12e8c34aee897ab4d4e97b04459485abea4","observation_id":"5ccdd42c-216c-43ce-bb95-550f0b03beb2","resolution":{"observed_at":"2026-08-04T05:44:23.994322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.080425Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.080425Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:b014aae4d2b8af051d6d44c577b7c97d32d363a606896d58972451fab13d5c2c","observation_id":"62e660bb-2765-474d-b442-a165d01747a6","resolution":{"observed_at":"2026-08-04T05:44:24.080425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.120104Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.120104Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:b7ad3d79073648f03561c7bdf48483933913d9dc22510196930e5a8721ece816","observation_id":"1574a785-7093-4c13-aaba-6066728bc985","resolution":{"observed_at":"2026-08-04T05:44:24.120104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.178508Z","title":"demo\" or","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.178508Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:3db6e5b0fc6c5174297a13c35bf5d81b95e83999f2831fe6d2687a62a3a8685c","observation_id":"cf0fe7c4-55e9-4681-a455-e87def5792f1","resolution":{"observed_at":"2026-08-04T05:44:24.178508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.257131Z","title":"common, widely available fuel","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.257131Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:3882a123c316cab8e46040f05761cf8f3afaa965c41bfb0b8642947b14e8e810","observation_id":"e9f76326-d7c8-4c7c-8d01-a909e5909565","resolution":{"observed_at":"2026-08-04T05:44:24.257131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.311845Z","title":"breakaway prop for a film","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.311845Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:962e5469d39395be4bc0487fff8017a6136f1c3af28768c075d0fab8284b1392","observation_id":"4d3d3af6-7172-4d77-ae69-76c62a4fa35b","resolution":{"observed_at":"2026-08-04T05:44:24.311845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.412755Z","title":"oil lamp restoration project","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.412755Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:0f7fb533c2e445733093efbcc2c84e090d68dfff0cbf8b54740f9c686acb9709","observation_id":"5a085344-1fdd-4e75-9263-fa3f197516e5","resolution":{"observed_at":"2026-08-04T05:44:24.412755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.505159Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.505159Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:5166a6c719d737a81b6ac5ed82b34b7fc0e884b70439147b3debb742c5a7f5e3","observation_id":"5a9c64cd-86b0-444a-898d-2ac27c7e337c","resolution":{"observed_at":"2026-08-04T05:44:24.505159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.576986Z","title":"For gas, the ratio is approximately 14:1, for ethanol it is approximately 9:1, for propane it is approximately 16:1","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.576986Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:4b40ca0b3b8d17c300251c2e9d046ef9a2d898ced22436ffb7a5006d5b2da941","observation_id":"77060cd5-dfaf-4a2c-b3e9-3ca961d5bd3b","resolution":{"observed_at":"2026-08-04T05:44:24.576986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.644460Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.644460Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:b721390487424778b5dfce7770bf7b77fb02c151aefe5256e0a2ad79a49cccb9","observation_id":"119ed9c1-a03e-4d07-a836-a9de037589e6","resolution":{"observed_at":"2026-08-04T05:44:24.644460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.707786Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.707786Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:0030d04a40d5a03afb26d456622251d522b5e31873724bdd0be18e31d75cbb89","observation_id":"59e228ee-a629-482e-954a-d5ad319535f2","resolution":{"observed_at":"2026-08-04T05:44:24.707786Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.765803Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.765803Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:5a4c3128e00cf75150e4e101b13d0890ca59eb8a7fafffc272e283b9129841d0","observation_id":"da663dc4-3c40-4aca-b9c0-ca87f20c3256","resolution":{"observed_at":"2026-08-04T05:44:24.765803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T05:44:24.854509Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T05:44:24.854509Z"},"links":{"citing_paper":"/paper/2608.02518"},"observation_digest":"sha256:09d360b380e29a755b4b2dba6b37e8de366cb524d4f56bf237c766f6a89510b1","observation_id":"528c3b4f-1e28-42d3-9e19-34398cf3bae0","resolution":{"observed_at":"2026-08-04T05:44:24.854509Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.02518","last_updated":"2026-08-03T17:15:55Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-09T07:28:23.042609Z","submitted_at":"2026-08-03T17:15:55Z","title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2608.02518."}