{"as_of":"2026-08-09T20:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:82d9391dc60ed5dde157d0953b84bccc86b3503693367cffe9a8edfe2b5f9084","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T00:14:58.564634Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.02683/citation-record","integrity":"/paper/2608.02683/integrity","json":"/paper/2608.02683/citation-record.json","paper":"/paper/2608.02683"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.090979Z","title":"arXiv preprint arXiv:2511.21990 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.090979Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:a148185836ac9f9814ab43e536fa05c36aa8fcf6a056629f335e89c4d8a89acc","observation_id":"afb7197a-f188-45d3-bcb2-05259d4f7dc9","resolution":{"observed_at":"2026-08-07T00:14:56.090979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.166560Z","title":"arXiv preprint arXiv:2510.02373 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.166560Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:db6fe88f2318c0f7313e4dfb92c311e01267a2441ee8c56dd6be0bbd230fd871","observation_id":"40cc3a29-9212-44ad-af56-09b22fb3e56e","resolution":{"observed_at":"2026-08-07T00:14:56.166560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.506597Z","title":", author=","venue":null,"work_id":"8da8802d-6de5-4a6c-9a02-c5e5e3db5994","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.240616Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:31bf97059af0e777603dcc81e79f8a1c716891652f19df832623874d821cdc68","observation_id":"8d2c7d24-0bb3-46b8-9581-2047b59b82a2","resolution":{"observed_at":"2026-08-07T00:15:01.584028Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2602.11749","last_updated":"2026-06-20T02:00:57Z","snapshot_observed_at":"2026-08-09T06:02:11.803557Z","submitted_at":"2026-02-12T09:24:50Z","title":"AIR: Improving Agent Safety through Incident Response","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.11749","snapshot_observed_at":"2026-08-07T00:14:56.319130Z","title":"arXiv preprint arXiv:2602.11749 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.319130Z"},"links":{"cited_paper":"/paper/2602.11749","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:7ed4e3899fd5260d26c0dce57053349d2cd556a4762c6252a39bd610e8efbf69","observation_id":"906efac7-b59b-4994-97b8-8d566dedf967","resolution":{"observed_at":"2026-08-07T00:14:56.319130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.396646Z","title":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.396646Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:03f6a28d4333cb937077ef4ce1a01e84dcd77b133d2a00a953c2c59da322b20f","observation_id":"9326f6b4-d499-4951-ba63-cbd0ffa9dd24","resolution":{"observed_at":"2026-08-07T00:14:56.396646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.349956Z","title":"2025 , howpublished =","venue":null,"work_id":"c72ccb72-e4c5-4ae4-acb8-3319a822e2c2","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.481763Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:840e4e6620577e7780a0ec0c071f22f3f200508e4bef424932487bab124e600e","observation_id":"ee551d2b-0e54-48d2-98df-eed99961d73b","resolution":{"observed_at":"2026-08-07T00:15:01.418016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:01.103236Z","title":"2024 , howpublished =","venue":null,"work_id":"4a507550-14fb-425a-8f5a-58b67dcb2e68","year":2024},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.556667Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:859df6f784bf6058d1a567baadd3ae13edb8015349ccff6b0468dba34713bcaa","observation_id":"b5a1c539-f314-42aa-9d25-26aee460be6d","resolution":{"observed_at":"2026-08-07T00:15:01.215182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.934992Z","title":"2022 , note =","venue":null,"work_id":"d7ac1338-f42f-4cc9-ab92-650db1f7e81f","year":2022},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.629451Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ebf981a5cb429b812cfec20173cb2cc94d9d4cddd0a8fc5a22b641bb0fb38e46","observation_id":"4d0cb8da-7b9a-47e9-83cd-49033d268016","resolution":{"observed_at":"2026-08-07T00:15:00.987343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.693891Z","title":"Proceedings of the 36th annual acm symposium on user interface software and technology , pages=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.693891Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:89cad671a7798409c7f4837cb32798e0f5dc12b97004d4c28b1f19669d34e7fe","observation_id":"c88d3408-781e-4429-8738-71d56c96e533","resolution":{"observed_at":"2026-08-07T00:14:56.693891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:56.697606Z","title":"2025 , howpublished =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.697606Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:9577f6a307bcbbaabd8a76a9a1fc05ab5ea15b0fe13c14f09cbc74687103b767","observation_id":"9b156c2c-1b36-46ad-8c9a-3a7bd6f9dbd9","resolution":{"observed_at":"2026-08-07T00:14:56.697606Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.737486Z","title":null,"venue":null,"work_id":"41f1cdc2-a25b-49fa-8421-9777bd6ee4df","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.727896Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ba362e93be3c2a1d1232efa124caf3c00439dcd27e5fccd9a101768e90dde99f","observation_id":"d06905fc-b75c-47a3-85fa-476501c3fb17","resolution":{"observed_at":"2026-08-07T00:15:00.821238Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.589895Z","title":null,"venue":null,"work_id":"911d2841-ecb6-4cb7-a723-dd8988ee3274","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.807894Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:d8369b4380332a7308500b6f5cf48a159f9087771df03109312c2303ef3de99e","observation_id":"c13e6408-ea05-41dc-bcf9-097721f278ca","resolution":{"observed_at":"2026-08-07T00:15:00.655435Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-07-06T17:00:00.321552Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-07T00:14:56.877675Z","title":"arXiv preprint arXiv:2312.06674 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.877675Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:667921e551165888a28509f8c1470a0065a579c8f92254d95b1fef9bf4734dac","observation_id":"5e7a0f68-979c-4ad9-bd7c-8dbe24e3b931","resolution":{"observed_at":"2026-08-07T00:14:56.877675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07875","last_updated":"2024-03-19T16:50:50Z","snapshot_observed_at":"2026-08-06T23:45:57.910675Z","submitted_at":"2023-09-14T17:23:37Z","title":"Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07875","snapshot_observed_at":"2026-08-07T00:14:56.953563Z","title":"arXiv preprint arXiv:2309.07875 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:56.953563Z"},"links":{"cited_paper":"/paper/2309.07875","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:6503d4595e1eb83f028f45f1b7b41f80c5b991e0324d8c9a1638ed425bf3e9cd","observation_id":"73fdfbbb-ea83-46f0-b5c7-7113c49022b6","resolution":{"observed_at":"2026-08-07T00:14:56.953563Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23020","last_updated":"2025-05-29T03:02:18Z","snapshot_observed_at":"2026-08-08T01:17:46.684635Z","submitted_at":"2025-05-29T03:02:18Z","title":"AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23020","snapshot_observed_at":"2026-08-07T00:14:57.011095Z","title":"arXiv preprint arXiv:2505.23020 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.011095Z"},"links":{"cited_paper":"/paper/2505.23020","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:a61a467e8a2c71033f92af67e1d4cd3301d868e9a3f4f46af64e27c9279a43f0","observation_id":"c8bd3207-13d8-40dc-b5d4-a773d0407b7b","resolution":{"observed_at":"2026-08-07T00:14:57.011095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.08270","last_updated":"2025-07-11T02:34:16Z","snapshot_observed_at":"2026-08-07T01:31:51.955348Z","submitted_at":"2025-07-11T02:34:16Z","title":"Agent Safety Alignment via Reinforcement Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.08270","snapshot_observed_at":"2026-08-07T00:14:57.067936Z","title":"arXiv preprint arXiv:2507.08270 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.067936Z"},"links":{"cited_paper":"/paper/2507.08270","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:588b6d3c5f5dd020fa0795c6dc1483d2b5ab97c3025f51955d2cd48c1257b0b5","observation_id":"1de972a0-65c9-483d-bc7a-6cef8dca0b61","resolution":{"observed_at":"2026-08-07T00:14:57.067936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.423483Z","title":"2025 , note =","venue":null,"work_id":"82b35ed9-01d8-4097-847c-7765040aa265","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.128934Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:085780eeafa12af3b76798d1c86047356db6874d616284f37ba16c0733fc8f60","observation_id":"95b11092-cdbf-4388-b858-3fe9aad23243","resolution":{"observed_at":"2026-08-07T00:15:00.494574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.178184Z","title":"arXiv preprint arXiv:2601.05504 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.178184Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:d06e0c7f6c7ce709a38ac51593cfadfe3ed0b2bc6278dabe6cf055d5026c55d6","observation_id":"4c734725-94af-4a8b-892c-ae544f3cfec2","resolution":{"observed_at":"2026-08-07T00:14:57.178184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.08646","last_updated":"2025-09-10T14:41:07Z","snapshot_observed_at":"2026-08-07T18:57:24.013284Z","submitted_at":"2025-09-10T14:41:07Z","title":"Architecting Resilient LLM Agents: A Guide to Secure Plan-then-Execute Implementations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.08646","snapshot_observed_at":"2026-08-07T00:14:57.241459Z","title":"arXiv preprint arXiv:2509.08646 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.241459Z"},"links":{"cited_paper":"/paper/2509.08646","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:c26e2507d8e95ee8b06107dd83d8bb16025cb9c9ef43c84c341dbeb068c82cf0","observation_id":"06492a6b-8673-4304-a557-553490f5b00a","resolution":{"observed_at":"2026-08-07T00:14:57.241459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.306898Z","title":"arXiv preprint arXiv:2601.10156 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.306898Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:5c02b125abf290a8ce92d206ef7a60b7c574eb3472ac12f8c2394bc0794cb64b","observation_id":"9c60b4ff-b85e-439f-afb6-87156955c3e9","resolution":{"observed_at":"2026-08-07T00:14:57.306898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.367177Z","title":"arXiv preprint arXiv:2602.14281 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.367177Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ba111a0efdd4e1ee8152a276950cd63c7bffa1103b2364d555fa64ceb25aa973","observation_id":"cdf31f13-865f-4563-8a08-500b063ec190","resolution":{"observed_at":"2026-08-07T00:14:57.367177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.421567Z","title":"arXiv preprint arXiv:2601.04795 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.421567Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:cc105808a0e7cc4be18f9167bf86f06030f92dc3a0899ff26becc1de8ea690e4","observation_id":"facaf944-11d1-4a8a-9198-611c9ad079b7","resolution":{"observed_at":"2026-08-07T00:14:57.421567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.18491","last_updated":"2026-04-23T11:55:10Z","snapshot_observed_at":"2026-07-06T22:43:02.453697Z","submitted_at":"2026-01-26T13:45:41Z","title":"AgentDoG: A Diagnostic Guardrail Framework for AI Agent Safety and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.18491","snapshot_observed_at":"2026-08-07T00:14:57.485998Z","title":"arXiv preprint arXiv:2601.18491 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.485998Z"},"links":{"cited_paper":"/paper/2601.18491","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:03ae3e132547876e2717c963da15ab7807539aff755db6101bac9ae7205ae927","observation_id":"c4fc9c64-e12d-4d2f-a8c0-625e991591c8","resolution":{"observed_at":"2026-08-07T00:14:57.485998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.00500","last_updated":"2026-08-03T00:31:29Z","snapshot_observed_at":"2026-08-08T19:29:44.414464Z","submitted_at":"2025-08-01T10:24:47Z","title":"ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Prediction","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.00500","snapshot_observed_at":"2026-08-07T00:14:57.549105Z","title":"arXiv preprint arXiv:2508.00500 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.549105Z"},"links":{"cited_paper":"/paper/2508.00500","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:164366b11ab654ae9bc907fdce8c0bda54ba300a7a2d09756bf421d200b63aab","observation_id":"347f6691-128f-45ca-b4ba-17257377482a","resolution":{"observed_at":"2026-08-07T00:14:57.549105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02022","last_updated":"2026-05-13T10:22:49Z","snapshot_observed_at":"2026-08-03T03:33:11.193819Z","submitted_at":"2026-04-02T13:26:20Z","title":"ATBench: A Diverse and Realistic Agent Trajectory Benchmark for Safety Evaluation and Diagnosis","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02022","snapshot_observed_at":"2026-08-07T00:14:57.617394Z","title":"arXiv preprint arXiv:2604.02022 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.617394Z"},"links":{"cited_paper":"/paper/2604.02022","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:c4e3d51c678fcc90639f1cdb1715a9fe905eb67789d9bfad3a4bc47b0bbbf3f3","observation_id":"1506c92c-486a-4421-a122-65d19768a590","resolution":{"observed_at":"2026-08-07T00:14:57.617394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:57.682155Z","title":"arXiv preprint arXiv:2603.28807 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.682155Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:1a3b86bee2a0dd1af926ab673ff2b81451794f553c1d29e723904777b0d8ad34","observation_id":"8778f5a9-2433-4530-a099-4592f41cd379","resolution":{"observed_at":"2026-08-07T00:14:57.682155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2601.10338","last_updated":"2026-01-15T12:31:52Z","snapshot_observed_at":"2026-07-06T22:41:48.115083Z","submitted_at":"2026-01-15T12:31:52Z","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2601.10338","snapshot_observed_at":"2026-08-07T00:14:57.758449Z","title":"arXiv preprint arXiv:2601.10338 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.758449Z"},"links":{"cited_paper":"/paper/2601.10338","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:804c42ae7294188ea5dea46627a08f59d4eab2c2758d578f643eef55853cd04a","observation_id":"37a249f5-c0ea-4e87-bf4b-7ddea907d309","resolution":{"observed_at":"2026-08-07T00:14:57.758449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02837","last_updated":"2026-04-03T07:56:42Z","snapshot_observed_at":"2026-08-09T17:45:51.819264Z","submitted_at":"2026-04-03T07:56:42Z","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02837","snapshot_observed_at":"2026-08-07T00:14:57.852752Z","title":"arXiv preprint arXiv:2604.02837 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.852752Z"},"links":{"cited_paper":"/paper/2604.02837","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:6d14e4d62fc56e4e9ba734dc80258ce127f1d1c233843e8f17851daa654c6e28","observation_id":"0e54de4a-ac97-45d2-a82c-36e4c3d48be5","resolution":{"observed_at":"2026-08-07T00:14:57.852752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.13630","last_updated":"2026-05-11T07:00:12Z","snapshot_observed_at":"2026-07-06T23:01:37.207817Z","submitted_at":"2026-04-15T08:59:00Z","title":"SafeHarness: Lifecycle-Integrated Security Architecture for LLM-based Agent Deployment","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.13630","snapshot_observed_at":"2026-08-07T00:14:57.920364Z","title":"arXiv preprint arXiv:2604.13630 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.920364Z"},"links":{"cited_paper":"/paper/2604.13630","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:c19ae9661f27afaaff90b41f5820aae5fff6bc3b2f4db175853968a9d94ebae2","observation_id":"ff03c969-b1d4-4e84-859b-8b7ab56ad5af","resolution":{"observed_at":"2026-08-07T00:14:57.920364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.233122Z","title":"2026 , eprint=","venue":null,"work_id":"1048aa0f-3fdd-42fc-ac67-4a1856663e78","year":2026},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:57.975505Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:f4db91d1e294efb8273bb40b0deb2c0e6124767faef23c8161116c14dd02a03c","observation_id":"74633031-927a-4244-969d-952e45893d43","resolution":{"observed_at":"2026-08-07T00:15:00.327745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:58.039136Z","title":"The eleventh international conference on learning representations , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.039136Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:5eee7fbc90ccacb05ad432525da006c454bfc42363686697fe25dba8d59975c6","observation_id":"9eb5d07c-b148-440c-beee-44da24204f79","resolution":{"observed_at":"2026-08-07T00:14:58.039136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:15:00.080399Z","title":"International Conference on Learning Representations , volume=","venue":null,"work_id":"451ba5d3-929a-4983-bfb9-23b32afeb4e3","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.093338Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:e15d3f54bcdb7bf3eb6e3105c0913332f5e9b28697dbbf2e11efef9a627ec35b","observation_id":"48dd8b98-917d-4cb3-958b-49cd9bd379fe","resolution":{"observed_at":"2026-08-07T00:15:00.117091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.929643Z","title":"2025 , howpublished =","venue":null,"work_id":"5978bf6f-2aff-4110-b878-d7428ca09827","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.182139Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:d05a0a05016d269b1d6f1b180acadde527ae7ebcac2dc720c9f361e1c6f200cd","observation_id":"4d6bdb13-a1b0-412a-a1f3-3492e0a0ae9a","resolution":{"observed_at":"2026-08-07T00:15:00.003644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.03574","last_updated":"2025-05-06T14:34:21Z","snapshot_observed_at":"2026-08-07T15:49:30.311074Z","submitted_at":"2025-05-06T14:34:21Z","title":"LlamaFirewall: An open source guardrail system for building secure AI agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.03574","snapshot_observed_at":"2026-08-07T00:14:58.268362Z","title":"arXiv preprint arXiv:2505.03574 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.268362Z"},"links":{"cited_paper":"/paper/2505.03574","citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:068cb47b90089121b2da02198b50a0e7cce545676e5542044eabf49a9fa29ea9","observation_id":"636a8164-b70f-40c7-92c3-bc3565450251","resolution":{"observed_at":"2026-08-07T00:14:58.268362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.744768Z","title":"2026 , url =","venue":null,"work_id":"c16d19ac-70eb-4016-9def-a47a6ef48224","year":2026},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.336718Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:1904de5934ed1f46650e5ac73694f4a7993c223ed887abadbbeb9ddbe8b0b9c1","observation_id":"a86f9904-1060-486d-ab6f-0d99022bff3e","resolution":{"observed_at":"2026-08-07T00:14:59.820656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:58.410632Z","title":"arXiv preprint arXiv:2412.13178 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.410632Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:e7f824dcca76ba320f8b245cc57edb6b599220d332ca92818b2c9ee4ec831e7f","observation_id":"78a9750d-8ab2-4dab-be3b-1167ce6133d2","resolution":{"observed_at":"2026-08-07T00:14:58.410632Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.573105Z","title":"IEEE Access , year=","venue":null,"work_id":"c05811b8-c80f-4b84-bbbe-a153f4bd7327","year":null},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.498239Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:ab340a0f8b8f64358c3aeb5361ad83403e0fe1a2d112628cbe81bb9ccfed3697","observation_id":"d1773241-7f66-4d07-bb8e-648d48b6a0b2","resolution":{"observed_at":"2026-08-07T00:14:59.656281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T00:14:59.432434Z","title":"2025 , eprint=","venue":null,"work_id":"a9b1d52f-f0db-462f-86ad-ec4c6170067d","year":2025},"citing_paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:58.564634Z"},"links":{"citing_paper":"/paper/2608.02683"},"observation_digest":"sha256:bb9731d0d6befeae365c09cccb68db5fb24bd9c70fa973b84bd03b10f1033e0c","observation_id":"09d5f75e-b324-43e0-a7a9-4c6e70545759","resolution":{"observed_at":"2026-08-07T00:14:59.516142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.02683","last_updated":"2026-08-03T02:06:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T02:52:18.946493Z","submitted_at":"2026-08-03T02:06:06Z","title":"$S^3$: Improving Agent Safety through Multi-Stage Defense"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":27,"verified_exact":0,"verified_fuzzy":11},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2608.02683."}