{"as_of":"2026-08-16T13:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:08992d66cce92a48e1bfc022c0d34226b9414a83fd84b15fed9eb04d0dda318b","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T15:14:29.769605Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02670/citation-record","integrity":"/paper/2608.02670/integrity","json":"/paper/2608.02670/citation-record.json","paper":"/paper/2608.02670"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2601.11868","last_updated":"2026-01-17T01:29:30Z","snapshot_observed_at":"2026-07-06T22:41:58.373427Z","submitted_at":"2026-01-17T01:29:30Z","title":"Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfaces","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.11868","snapshot_observed_at":"2026-08-15T15:14:29.537133Z","title":"and Shaw, Alexander G","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.537133Z"},"links":{"cited_paper":"/paper/2601.11868","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:71534f04ea0621b62cc2ba0daa3baee2a880d7fa258e152840c56c73b5348752","observation_id":"66206bf6-958c-4de6-87c7-e153f30feb1e","resolution":{"observed_at":"2026-08-15T15:14:29.537133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.04528","last_updated":"2024-07-16T07:29:49Z","snapshot_observed_at":"2026-08-15T06:49:16.314417Z","submitted_at":"2023-06-07T15:37:00Z","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.04528","snapshot_observed_at":"2026-08-15T15:14:29.543823Z","title":"doi:10.48550/ARXIV.2306.04528 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.543823Z"},"links":{"cited_paper":"/paper/2306.04528","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:1b28a0048e7c6ffb1cf43d0fbc063fad1cde40b3f39d7a84d70575387d97518b","observation_id":"d22d9646-c12c-47bf-a5b6-fb080775228f","resolution":{"observed_at":"2026-08-15T15:14:29.543823Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.02840","last_updated":"2022-01-10T06:05:16Z","snapshot_observed_at":"2026-08-13T17:39:43.122193Z","submitted_at":"2021-11-04T12:59:55Z","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.02840","snapshot_observed_at":"2026-08-15T15:14:29.548847Z","title":"Adversarial","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.548847Z"},"links":{"cited_paper":"/paper/2111.02840","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:f00f1ea71677d5fcec4a854e4be41f6640cc2004db10440d056ebda7ff092b72","observation_id":"cbc473e1-9fb5-4ff0-87e8-bc8b7b39678a","resolution":{"observed_at":"2026-08-15T15:14:29.548847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:29.553056Z","title":"doi:10.48550/ARXIV.2510.03285 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.553056Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:49c4c7a2b8dfeb245820cb7ea968f9da68cb325d1d894095ea5926cf86ba467f","observation_id":"82e70164-4c61-4cef-91d2-a09dd161b6d1","resolution":{"observed_at":"2026-08-15T15:14:29.553056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.00644","last_updated":"2020-09-14T09:55:13Z","snapshot_observed_at":"2026-08-13T09:32:00.308636Z","submitted_at":"2020-07-01T17:53:26Z","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.00644","snapshot_observed_at":"2026-08-15T15:14:29.557576Z","title":"Measuring","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.557576Z"},"links":{"cited_paper":"/paper/2007.00644","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:3d5dbb245861608a35cc31f39cd93924f281d3de94237af16f9a3e618db75698","observation_id":"38115508-950a-44ec-aa8b-906b8734a37e","resolution":{"observed_at":"2026-08-15T15:14:29.557576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15817","last_updated":"2024-05-17T17:17:45Z","snapshot_observed_at":"2026-07-06T16:24:30.545494Z","submitted_at":"2023-09-25T17:08:02Z","title":"Identifying the Risks of LM Agents with an LM-Emulated Sandbox","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15817","snapshot_observed_at":"2026-08-15T15:14:29.561886Z","title":"and Hashimoto, Tatsunori , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.561886Z"},"links":{"cited_paper":"/paper/2309.15817","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:92e45ad67b434c6a2b819e31968e67b9d4503d2aaeeb1ccfad609cf590268c1a","observation_id":"b8373bfa-1b15-46cd-819e-3227e75ad047","resolution":{"observed_at":"2026-08-15T15:14:29.561886Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.05176","last_updated":"2023-05-09T05:11:02Z","snapshot_observed_at":"2026-08-10T11:59:11.481480Z","submitted_at":"2023-05-09T05:11:02Z","title":"FrugalGPT: How to Use Large Language Models While Reducing Cost and Improving Performance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.05176","snapshot_observed_at":"2026-08-15T15:14:29.567661Z","title":"Transactions on Machine Learning Research , publisher =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.567661Z"},"links":{"cited_paper":"/paper/2305.05176","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:203825b4339f42bdf02aad3a60c7d8a5fd799c7cf4b15ce1298a324c24006ba7","observation_id":"7821d604-567e-499f-9771-fe8227b539b0","resolution":{"observed_at":"2026-08-15T15:14:29.567661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.01502","last_updated":"2024-07-01T17:48:14Z","snapshot_observed_at":"2026-08-16T13:38:01.685520Z","submitted_at":"2024-07-01T17:48:14Z","title":"AI Agents That Matter","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.01502","snapshot_observed_at":"2026-08-15T15:14:29.572145Z","title":"and Nadgir, Nitya and Narayanan, Arvind , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.572145Z"},"links":{"cited_paper":"/paper/2407.01502","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:96f064ac8439fffe5d0e7a0eb37565dba69478b888611b1f3c62d873954220f8","observation_id":"7b219c51-491c-4db0-a4e5-e32f7019533c","resolution":{"observed_at":"2026-08-15T15:14:29.572145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18665","last_updated":"2025-02-23T08:50:33Z","snapshot_observed_at":"2026-08-16T00:08:23.767909Z","submitted_at":"2024-06-26T18:10:22Z","title":"RouteLLM: Learning to Route LLMs with Preference Data","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18665","snapshot_observed_at":"2026-08-15T15:14:29.576274Z","title":"and Kadous, M Waleed and Stoica, Ion , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.576274Z"},"links":{"cited_paper":"/paper/2406.18665","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:dd5bf0301c1063c48cc6dcf5918490922ad87a7bffb40bd553acfa3d81abf053","observation_id":"956638cb-9b9f-49af-9902-b3464dd5f2a9","resolution":{"observed_at":"2026-08-15T15:14:29.576274Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:29.581082Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.581082Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:3b7f409b06509fa298f8a9fc9102817625dd0ff2ab865ce5d3a13727ea8157bc","observation_id":"b906b034-fcab-40ad-95bb-12fe43811cfe","resolution":{"observed_at":"2026-08-15T15:14:29.581082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06703","last_updated":"2026-06-04T09:59:28Z","snapshot_observed_at":"2026-08-16T13:11:11.539278Z","submitted_at":"2024-10-09T09:13:38Z","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06703","snapshot_observed_at":"2026-08-15T15:14:29.585658Z","title":"doi:10.48550/arXiv.2410.06703 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.585658Z"},"links":{"cited_paper":"/paper/2410.06703","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:588dd26ca5d11f9735d85f4dc26abbf7be8b791692da00fd23cd108e5f3a410a","observation_id":"e36e6bc9-1f05-46e2-adb4-a5cbbca43142","resolution":{"observed_at":"2026-08-15T15:14:29.585658Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02544","last_updated":"2025-09-05T09:21:10Z","snapshot_observed_at":"2026-08-16T13:28:26.846597Z","submitted_at":"2024-08-05T15:16:22Z","title":"Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02544","snapshot_observed_at":"2026-08-15T15:14:29.589675Z","title":"Caution for the","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.589675Z"},"links":{"cited_paper":"/paper/2408.02544","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:67372e9c6968a1cbec6d63c1a3b5e32bf444091f64be727ceadbbe4c03d8b590","observation_id":"9fd58e83-7c58-4cd0-a333-e9159fd64901","resolution":{"observed_at":"2026-08-15T15:14:29.589675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.48550/arxiv.2601.06112","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.098555Z","title":"doi:10.48550/ARXIV.2601.06112 , abstract =","venue":null,"work_id":"18dd3717-57fa-4bc5-be52-e2142235ae90","year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.594227Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:3e1ea3c3a29edf87dd93e17b4baca28ef119077f76fdf0013ec8af9c39c0439d","observation_id":"7d52f938-ee87-4f2d-a978-4b2a58026c21","resolution":{"observed_at":"2026-08-15T15:14:30.103036Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.09024","last_updated":"2025-04-18T14:30:31Z","snapshot_observed_at":"2026-08-16T05:17:43.289570Z","submitted_at":"2024-10-11T17:39:22Z","title":"AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.09024","snapshot_observed_at":"2026-08-15T15:14:29.598860Z","title":"doi:10.48550/ARXIV.2410.09024 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.598860Z"},"links":{"cited_paper":"/paper/2410.09024","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:39d89deae7a92fee2bf1631097bccdbfb5f2e772bb6528d51c9cb2af2702a165","observation_id":"3d0ff94f-4842-4acb-a1f9-4fd6dff0d558","resolution":{"observed_at":"2026-08-15T15:14:29.598860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12045","last_updated":"2024-06-17T19:33:08Z","snapshot_observed_at":"2026-08-14T14:24:18.501413Z","submitted_at":"2024-06-17T19:33:08Z","title":"$\\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12045","snapshot_observed_at":"2026-08-15T15:14:29.604885Z","title":"\\ τ\\ -bench:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.604885Z"},"links":{"cited_paper":"/paper/2406.12045","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:1c420530bc1e870eea7c201763d1d0e8ed0af063faac75e567572db48c36f79a","observation_id":"81793c7e-c7a3-49aa-9d35-8ed92ebb2f67","resolution":{"observed_at":"2026-08-15T15:14:29.604885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.21967","last_updated":"2025-06-27T07:13:29Z","snapshot_observed_at":"2026-08-13T18:58:34.652662Z","submitted_at":"2025-06-27T07:13:29Z","title":"More Vulnerable than You Think: On the Stability of Tool-Integrated LLM Agents","version":1},"cited_work":{"arxiv_id":"2506.21967","doi":"10.48550/arxiv.2506.21967","metadata_source":"pith","pith_arxiv_id":"2506.21967","snapshot_observed_at":"2026-08-15T18:16:14.067578Z","title":"More Vulnerable than You Think: On the Stability of Tool-Integrated LLM Agents","venue":"cs.CL","work_id":"6561827c-fbc0-451f-a87e-defceb4197f4","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.609676Z"},"links":{"cited_paper":"/paper/2506.21967","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:f5a6bc4e74ac0fbd6d90291a589001521998cacadbb638fdb59ba49a0b46aa27","observation_id":"55234a13-4cf2-46d2-b1c4-7b868cefa70e","resolution":{"observed_at":"2026-08-15T15:14:29.981502Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.07972","last_updated":"2024-05-30T08:55:12Z","snapshot_observed_at":"2026-08-14T22:26:00.902198Z","submitted_at":"2024-04-11T17:56:05Z","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.07972","snapshot_observed_at":"2026-08-15T15:14:29.614789Z","title":"doi:10.48550/ARXIV.2404.07972 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.614789Z"},"links":{"cited_paper":"/paper/2404.07972","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:6c0a404d71d12b7821855ca57039d8c72a7b223b3fcc31f353678f1bbcec2a32","observation_id":"066561ce-101c-49e5-8780-e50a5c65049e","resolution":{"observed_at":"2026-08-15T15:14:29.614789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14161","last_updated":"2025-09-10T08:35:19Z","snapshot_observed_at":"2026-08-15T12:13:55.739245Z","submitted_at":"2024-12-18T18:55:40Z","title":"TheAgentCompany: Benchmarking LLM Agents on Consequential Real World Tasks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14161","snapshot_observed_at":"2026-08-15T15:14:29.619930Z","title":"and Song, Yufan and Li, Boxuan and Tang, Yuxuan and Jain, Kritanjali and Bao, Mengxue and Wang, Zora Z","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.619930Z"},"links":{"cited_paper":"/paper/2412.14161","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:15adaa5b65628bd81ae81efcf63a778355042a400862570205d22b7af0b36bb7","observation_id":"37c4a9ca-5e8d-49c0-8d74-00f73b19ab02","resolution":{"observed_at":"2026-08-15T15:14:29.619930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2511.02734","last_updated":"2026-06-29T03:11:56Z","snapshot_observed_at":"2026-08-13T17:31:55.755158Z","submitted_at":"2025-11-04T16:58:29Z","title":"CostBench: Evaluating Multi-Turn Cost-Optimal Planning and Adaptation in Dynamic Environments for LLM Tool-Use Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.02734","snapshot_observed_at":"2026-08-15T15:14:29.624236Z","title":", month = jun, year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.624236Z"},"links":{"cited_paper":"/paper/2511.02734","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:733c71d524871eeed961ec83bd805fbc0455fd6d6b60af60cdd6a5f1dadccc22","observation_id":"c04ad23a-fdb4-4b75-be59-6b7e32f9aadc","resolution":{"observed_at":"2026-08-15T15:14:29.624236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.06770","last_updated":"2024-11-11T23:05:04Z","snapshot_observed_at":"2026-08-12T14:56:35.025839Z","submitted_at":"2023-10-10T16:47:29Z","title":"SWE-bench: Can Language Models Resolve Real-World GitHub Issues?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.06770","snapshot_observed_at":"2026-08-15T15:14:29.628905Z","title":"and Yang, John and Wettig, Alexander and Yao, Shunyu and Pei, Kexin and Press, Ofir and Narasimhan, Karthik , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.628905Z"},"links":{"cited_paper":"/paper/2310.06770","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:fe5901f96388257776bf3eeee9802af58b840f8aba4b5cb33330d83931866c3e","observation_id":"ae82c6fa-aaec-442d-a4f3-0e5dbd3d722e","resolution":{"observed_at":"2026-08-15T15:14:29.628905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:29.632966Z","title":"2020 , note =","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.632966Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:50e5e201404d30f6f7f2e2176814ac973e01ff3eca003843b8ab0604c058ac46","observation_id":"6d904619-0607-45d1-b474-344f6b99159e","resolution":{"observed_at":"2026-08-15T15:14:29.632966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.830400Z","title":"arXiv.org , author =","venue":null,"work_id":"a19ff252-c78a-47a4-8ccc-3ada50c4d6f6","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.638311Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:38040ba5ead5cac1bccaa95c68d12b6f8bd8d9520d6a47488f5c013417ce8c97","observation_id":"467c1337-446b-4e29-8947-291c8976ec81","resolution":{"observed_at":"2026-08-15T15:14:30.834559Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:29.643187Z","title":"doi:10.48550/ARXIV.2602.10975 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.643187Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:d84ac6003293911a55bea69f113a83d5286f0f782f6de0293191e1e4adebfae0","observation_id":"ca69b113-5fca-48ba-8303-357e39c90621","resolution":{"observed_at":"2026-08-15T15:14:29.643187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-13T15:19:02.871791Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-15T15:14:29.647335Z","title":"Defeating","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.647335Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:fe134e0159fb9de6eb1da84920a30c3b034c50d777daf12a9fa29d80c2b61ac6","observation_id":"6f7569f6-0658-4519-a59f-4063470305e0","resolution":{"observed_at":"2026-08-15T15:14:29.647335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11703","last_updated":"2026-05-14T02:36:38Z","snapshot_observed_at":"2026-08-12T23:26:44.716922Z","submitted_at":"2025-04-16T01:58:40Z","title":"Progent: Securing AI Agents with Privilege Control","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11703","snapshot_observed_at":"2026-08-15T15:14:29.651663Z","title":"Progent:","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.651663Z"},"links":{"cited_paper":"/paper/2504.11703","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:1f442bc6ace6146a33080c76ad4d2a918fffd2c9314f1cdd836498fb5df0532b","observation_id":"ae039497-dc29-43f6-ae05-aef711580e43","resolution":{"observed_at":"2026-08-15T15:14:29.651663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.03117","last_updated":"2026-05-07T07:42:14Z","snapshot_observed_at":"2026-08-11T14:17:58.581691Z","submitted_at":"2026-02-03T05:20:42Z","title":"AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.03117","snapshot_observed_at":"2026-08-15T15:14:29.656259Z","title":"doi:10.48550/ARXIV.2602.03117 , abstract =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.656259Z"},"links":{"cited_paper":"/paper/2602.03117","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:88dceb94a08573b868df88166985d30d10116eb12725ab02593399f85257c7d6","observation_id":"6a92e71d-3b94-4d87-ab59-997a8c5843fc","resolution":{"observed_at":"2026-08-15T15:14:29.656259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:29.660852Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.660852Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:2370e6e8811bbc92d6253ab6ed03410a79cebe3b916cbfdad4015bff0305044f","observation_id":"51a406ca-1fc4-4769-8206-607c53b9dd9e","resolution":{"observed_at":"2026-08-15T15:14:29.660852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:29.665560Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.665560Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:c49ff3c688d6cb3b4b38d8f6c2b43c4e7e97aba77f3d7d446e0eff3d0b5ad8be","observation_id":"4bf84392-c628-416b-83f4-3b0899903b11","resolution":{"observed_at":"2026-08-15T15:14:29.665560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.816924Z","title":null,"venue":null,"work_id":"cf699ec0-bb72-4fc4-bb1d-d31f2f2cae69","year":2024},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.669456Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:e0fca3f76ab069b529bf61cb3a0c5b2d806818f6f04592a3771094969ed76df9","observation_id":"5bd63484-843b-4a3b-ad05-e62a0e715bf0","resolution":{"observed_at":"2026-08-15T15:14:30.821195Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.802102Z","title":null,"venue":null,"work_id":"f52bd824-e730-44b3-a487-dd36349220a1","year":2024},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.673608Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:883f85ab68845864cde6e352c29aa8e434cfe80805ff1519924adfc6b6b05049","observation_id":"9ea91114-2600-46df-a6d0-d85640c3d490","resolution":{"observed_at":"2026-08-15T15:14:30.806618Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.788085Z","title":null,"venue":null,"work_id":"27c30bea-e213-4ee2-b4ae-c37e5aa37359","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.678212Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:7ea0ec9c347c6e4c93e5062d0bb87ff62b5ba13d402d2cf07f9a576751664653","observation_id":"4ee62280-7a9d-459a-abb4-6f061b2af175","resolution":{"observed_at":"2026-08-15T15:14:30.792554Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.775306Z","title":null,"venue":null,"work_id":"7c11eaa5-4708-4f65-87df-175a78bbe81d","year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.681930Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:095c03599d9b172bd46ae124d0838cf45da33c95d1948840dcb1a33b71fb4fed","observation_id":"9974f190-9c86-4711-8ada-c03dd42f7916","resolution":{"observed_at":"2026-08-15T15:14:30.779313Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.761804Z","title":"E.; Yang, J.; Wettig, A.; Yao, S.; Pei, K.; Press, O.; and Narasimhan, K","venue":null,"work_id":"91001fac-facb-4c90-bd5f-75082e4c0cb0","year":2023},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.685593Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:e07c973fc51b0355fe4fa38482cb598a75d7ba26c0bf8681356cbd579dd79720","observation_id":"0dd55393-2d10-4f21-a9a9-e3088f29cb59","resolution":{"observed_at":"2026-08-15T15:14:30.766104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.747103Z","title":null,"venue":null,"work_id":"975810ed-8946-404c-a016-6b2a3ce4d82f","year":2020},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.689471Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:a8a3d99e1211fabeb9101bcec201b6f3dfb428c3a1cb0ef089cc6dc10bb1e10e","observation_id":"d3b9b03f-a1eb-420f-852a-650c3fe15083","resolution":{"observed_at":"2026-08-15T15:14:30.751446Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.732014Z","title":"S.; Nadgir, N.; and Narayanan, A","venue":null,"work_id":"1adfc9cd-3796-4234-82e4-7a3a78cabd91","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.693520Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:5fabcec436c16c9da35157ac1f8e88084f3acc85d62007c1d8cd23cba81d4b4c","observation_id":"029388f2-dd64-4fc8-818c-b9fffefc778b","resolution":{"observed_at":"2026-08-15T15:14:30.737810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.715974Z","title":null,"venue":null,"work_id":"9039eb00-65a3-489a-a732-c435e550bc80","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.697131Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:994ff01e6a146cfade3f59e6850576b713cb05fad747468f8b27c0b240f69ddb","observation_id":"6838fd01-8e97-4207-8f6d-ec6b06b98529","resolution":{"observed_at":"2026-08-15T15:14:30.720958Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.06703","last_updated":"2026-06-04T09:59:28Z","snapshot_observed_at":"2026-08-16T13:11:11.539278Z","submitted_at":"2024-10-09T09:13:38Z","title":"ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.06703","snapshot_observed_at":"2026-08-15T15:14:29.700885Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.700885Z"},"links":{"cited_paper":"/paper/2410.06703","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:52706372ff600e5ab4170f9cc47ce8a08fa512e9b6ba95a8113bb42188a78b02","observation_id":"577e4343-0ade-4961-b2c6-f84a7f89ef71","resolution":{"observed_at":"2026-08-15T15:14:29.700885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.700568Z","title":null,"venue":null,"work_id":"3b6d37ba-e3df-4c58-a533-0d50b799ef1e","year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.704321Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:1e03c53c9b3b8c39be965f9c5bf9aabd63807d5748eaedb41783af1f339a9b28","observation_id":"1d5ad207-c2a6-4f09-9ba6-11f2960ec3a8","resolution":{"observed_at":"2026-08-15T15:14:30.704770Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.688086Z","title":null,"venue":null,"work_id":"afacb1b1-0449-4de1-8731-5fd8f89559f0","year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.708762Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:7f0f6faae3e938f5628d8a0df7438706f1c32fc2584db0490eb173dc65dafebf","observation_id":"aa506733-4b7b-4f77-bc0c-d530272e321d","resolution":{"observed_at":"2026-08-15T15:14:30.692391Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.675345Z","title":null,"venue":null,"work_id":"e5fe17bd-de28-42a6-a0ef-53208445e7dc","year":2024},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.712819Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:1b9d077c8e252a4354e2db55fb9821ddb969cae1f5c121a2b0c501ca398624c7","observation_id":"dc3fb628-7b42-487f-9bea-a2555b7076d7","resolution":{"observed_at":"2026-08-15T15:14:30.680756Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.11868","last_updated":"2026-01-17T01:29:30Z","snapshot_observed_at":"2026-07-06T22:41:58.373427Z","submitted_at":"2026-01-17T01:29:30Z","title":"Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfaces","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.11868","snapshot_observed_at":"2026-08-15T15:14:29.716206Z","title":"A.; Shaw, A","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.716206Z"},"links":{"cited_paper":"/paper/2601.11868","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:5807f39ca67b71b37e0166cc5eb2c166a0bc371a87aa4dc32799f347d308edb1","observation_id":"27004586-1b67-469a-9fab-533725d63b23","resolution":{"observed_at":"2026-08-15T15:14:29.716206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.661761Z","title":"E.; Kadous, M","venue":null,"work_id":"d9707f18-d2ae-4b99-821b-dae0101ced76","year":2024},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.720376Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:0a35d1b7eeb5377796275f297561e75f57cd258bc7f6ece824671ba57235fe62","observation_id":"6cbbe059-2f28-41bc-b252-3c87b1e400f5","resolution":{"observed_at":"2026-08-15T15:14:30.666204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.646501Z","title":"J.; and Hashimoto, T","venue":null,"work_id":"580873c6-b198-4518-8222-51f71a20a279","year":2023},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.723814Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:c359bd00d6ecc0049a24ac416c23127b08f0d66aa005c5fc78151e1537c85526","observation_id":"0324b38a-84ee-44a5-9c63-9e056f428019","resolution":{"observed_at":"2026-08-15T15:14:30.650723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.631279Z","title":null,"venue":null,"work_id":"6b820abb-25a5-45a4-a535-79e86afbfc2b","year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.727062Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:cc2b9cec3d5d80bdb083d540ffe20846d9c9c951eae9238755d638f493b50694","observation_id":"b430b57c-3938-4c16-bd8c-e2cc7341489f","resolution":{"observed_at":"2026-08-15T15:14:30.636214Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2511.04355","last_updated":"2025-11-06T13:38:03Z","snapshot_observed_at":"2026-08-13T07:47:38.831610Z","submitted_at":"2025-11-06T13:38:03Z","title":"Where Do LLMs Still Struggle? An In-Depth Analysis of Code Generation Benchmarks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2511.04355","snapshot_observed_at":"2026-08-15T15:14:29.730197Z","title":"M.; Heydari, M.; Kazerooni, P.; Maninger, D.; and Mezini, M","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.730197Z"},"links":{"cited_paper":"/paper/2511.04355","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:7da96c8db09743cc499a309124ef7509f7d4a5cebb8cac529c97b7a1838c2511","observation_id":"4d8f4ddd-cd56-4080-8633-58eab8a8a80f","resolution":{"observed_at":"2026-08-15T15:14:29.730197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.615147Z","title":null,"venue":null,"work_id":"6e20ee50-9319-4a54-8181-77de5ebbdac8","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.734038Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:b7ca0fc5dac7acdfaf266f6ce291513b9ee1557a0f6d5fae577bf31308078026","observation_id":"7c27e69c-0343-4096-bf5a-35413465591e","resolution":{"observed_at":"2026-08-15T15:14:30.620133Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.602192Z","title":"D.; Greenwood, D.; Chan, A.; and Pentland, A","venue":null,"work_id":"75a85aa2-525e-434e-b7bf-77416b903cb5","year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.739072Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:84de0fb91b935e8f1d3adf0192567ff0335416611511fd9e186952df9b3eb80b","observation_id":"7f386bcb-3d48-4345-ae68-dc91bf553a88","resolution":{"observed_at":"2026-08-15T15:14:30.606456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.588739Z","title":null,"venue":null,"work_id":"d5f2a76e-c650-4b5f-aebe-86462cafe72f","year":2020},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.742821Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:3404694b284aee3b99bc5b00d02419156afcf1f55f68e1eac8112f28ba41ca32","observation_id":"61221fb4-c9e5-4eb2-a1c7-8466ccd7c75a","resolution":{"observed_at":"2026-08-15T15:14:30.593138Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.574844Z","title":"H.; and Li, B","venue":null,"work_id":"54957535-7590-4c85-baa5-07276617804e","year":2021},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.746828Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:dd988e5307271ff902374f6c8f71498536a058b9a9b4da838c2c8f9469b74bc7","observation_id":"f4f1fd40-3d75-427a-babe-c631123bea20","resolution":{"observed_at":"2026-08-15T15:14:30.578996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.561639Z","title":"J.; Cheng, Z.; Shin, D.; Lei, F.; Liu, Y.; Xu, Y.; Zhou, S.; Savarese, S.; Xiong, C.; Zhong, V.; and Yu, T","venue":null,"work_id":"bd7b152e-ac3a-4453-bb7e-141b26d1983c","year":2024},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.750789Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:92aa2bba468dd977c9f7b4e9a957b4cd8a0cc7dc6ed878dec873fa494065bde2","observation_id":"27c04f06-f408-4ef6-b713-45c2cf00b319","resolution":{"observed_at":"2026-08-15T15:14:30.566289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.21967","last_updated":"2025-06-27T07:13:29Z","snapshot_observed_at":"2026-08-13T18:58:34.652662Z","submitted_at":"2025-06-27T07:13:29Z","title":"More Vulnerable than You Think: On the Stability of Tool-Integrated LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.21967","snapshot_observed_at":"2026-08-15T15:14:29.754476Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.754476Z"},"links":{"cited_paper":"/paper/2506.21967","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:9aecb3492d0bd9010868757be0827be2a7c0b45a9cc3ada4abb7f2368e4b8c8b","observation_id":"d40d21ff-321b-4b17-81b5-1cecfdd24f51","resolution":{"observed_at":"2026-08-15T15:14:29.754476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12045","last_updated":"2024-06-17T19:33:08Z","snapshot_observed_at":"2026-08-14T14:24:18.501413Z","submitted_at":"2024-06-17T19:33:08Z","title":"$\\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12045","snapshot_observed_at":"2026-08-15T15:14:29.758408Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.758408Z"},"links":{"cited_paper":"/paper/2406.12045","citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:64f5e0d4bc8ab9f626ae643832a6df07a916b2aeb6b276d00965563278c092ba","observation_id":"8ca3a625-0b11-418e-90c3-0d2b44cf661a","resolution":{"observed_at":"2026-08-15T15:14:29.758408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.546580Z","title":null,"venue":null,"work_id":"fa7af436-be6d-44de-af9a-4daa1b382e87","year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.762114Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:201a60f16b38df5246da2c3e932d087994d5849c4f677c4abbcd7b6136d7721b","observation_id":"f6ba549b-8ac3-40dc-8415-3610cfbef24f","resolution":{"observed_at":"2026-08-15T15:14:30.552444Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.528775Z","title":null,"venue":null,"work_id":"05e72963-aa06-4049-a570-7d133a0521dd","year":2026},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.765864Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:39d1f7102a5bc367f2817bddd8ba0d064b2ac9145ea8907b89f81acc58fbb238","observation_id":"eccd6e8c-dd8f-483b-b6aa-238596317a69","resolution":{"observed_at":"2026-08-15T15:14:30.534495Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T15:14:30.512803Z","title":"Z.; and Xie, X","venue":null,"work_id":"77684807-5db9-46e2-b1f6-4f75d6eb67d6","year":2023},"citing_paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments","version":1},"reference_index":55,"source":"arxiv_source","source_observed_at":"2026-08-15T15:14:29.769605Z"},"links":{"citing_paper":"/paper/2608.02670"},"observation_digest":"sha256:8f7eb2aff729d8df02ac8b8bec7e6e47f8c23d761f2bfdc6d8534da1994981f1","observation_id":"758eea9a-4d3d-4ef4-8d2a-516ac7f2c538","resolution":{"observed_at":"2026-08-15T15:14:30.517210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02670","last_updated":"2026-08-02T14:26:12Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T00:09:08.399733Z","submitted_at":"2026-08-02T14:26:12Z","title":"Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":44,"verified_exact":2,"verified_fuzzy":9},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2608.02670."}