{"as_of":"2026-08-10T04:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a7499e3949f9b05fe174ff2bd226059293d5bfcc6c91116cf9e7f9832b4edc0f","coverage":[{"denominator":85,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":85,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T22:07:42.432678Z","state":"measured"},{"denominator":85,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":85,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03272/citation-record","integrity":"/paper/2608.03272/integrity","json":"/paper/2608.03272/citation-record.json","paper":"/paper/2608.03272"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.13657","last_updated":"2025-10-26T23:25:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-03-17T19:04:38Z","title":"Why Do Multi-Agent LLM Systems Fail?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.13657","snapshot_observed_at":"2026-08-05T22:07:41.982048Z","title":"Pan, Shuyi Yang, Lakshya A","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.982048Z"},"links":{"cited_paper":"/paper/2503.13657","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:c974e58522698d20573e022de2b9e24ee17047d47c296ed99f9d77b0e8ddbe68","observation_id":"3122d6bc-57cf-4c66-90a3-9e887465d0cd","resolution":{"observed_at":"2026-08-05T22:07:41.982048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.27765","last_updated":"2026-04-09T16:04:48Z","snapshot_observed_at":"2026-08-03T12:37:07.175045Z","submitted_at":"2026-03-29T16:58:29Z","title":"Let the Agent Steer: Closed-Loop Ranking Optimization via Influence Exchange","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.27765","snapshot_observed_at":"2026-08-05T22:07:41.988536Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.988536Z"},"links":{"cited_paper":"/paper/2603.27765","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:58ee46b5eaa4a9b163c98cbdebc1a938243a0764646195a93db627141d4381e5","observation_id":"b4303ebe-ec30-497d-9ed3-fa9b12059668","resolution":{"observed_at":"2026-08-05T22:07:41.988536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3439729","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.560596Z","title":null,"venue":null,"work_id":"e90d162a-34e4-4d4e-ac01-990533758537","year":2021},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.993906Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:902cd3b69960369166fb5cd60314bf8c99b1ba894a49e8b4ea009efc1db717c5","observation_id":"72ec97de-6d30-423c-b6e0-48bbfed50b31","resolution":{"observed_at":"2026-08-05T22:07:42.566696Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:41.999411Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:41.999411Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:229337bdc9102a19c529df8a8c3e4d61da9f42285f07e24f05c271d26da7bbac","observation_id":"ef27c86b-ffb0-44fc-894e-ac268c00c6bf","resolution":{"observed_at":"2026-08-05T22:07:41.999411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.04468","last_updated":"2024-11-07T06:36:19Z","snapshot_observed_at":"2026-08-04T17:52:28.620519Z","submitted_at":"2024-11-07T06:36:19Z","title":"Magentic-One: A Generalist Multi-Agent System for Solving Complex Tasks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.04468","snapshot_observed_at":"2026-08-05T22:07:42.005668Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.005668Z"},"links":{"cited_paper":"/paper/2411.04468","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:87c290a636b5e45eb34039c8a65fbe86dbc5083cb2a30096b247263d78eef6b4","observation_id":"c018b495-1c6b-4b12-a3ee-e29818618b8f","resolution":{"observed_at":"2026-08-05T22:07:42.005668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.010963Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.010963Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e4bb8a1835eb2f303507651cb7d6cd60ae805e44c6f6df761a778e4681522c9d","observation_id":"884ab759-7c05-4ea6-941b-d7397b1f0d57","resolution":{"observed_at":"2026-08-05T22:07:42.010963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.016361Z","title":"Gómez, A","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.016361Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:848a5883c9ca30b7cbc7db7ff136dd241fd1d25237a0f8156810999dc6567d9a","observation_id":"011e530b-c965-467d-9884-bc61fcad0a26","resolution":{"observed_at":"2026-08-05T22:07:42.016361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.021157Z","title":"Maxwell Harper and Joseph A","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.021157Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:982342a132599801cf7ca00a91a7c8df194ec7598a79e2ed9d752abff86bb60c","observation_id":"5b78afde-0831-412c-a2ab-cbadc49d27ab","resolution":{"observed_at":"2026-08-05T22:07:42.021157Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23885","last_updated":"2025-06-11T01:42:53Z","snapshot_observed_at":"2026-08-07T22:31:50.319614Z","submitted_at":"2025-05-29T17:51:58Z","title":"OWL: Optimized Workforce Learning for General Multi-Agent Assistance in Real-World Task Automation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23885","snapshot_observed_at":"2026-08-05T22:07:42.028159Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.028159Z"},"links":{"cited_paper":"/paper/2505.23885","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4fca3b73e5daeed66dbdce52f85ad6110e16183193856b1ba39d900e99cfd97f","observation_id":"e52e806d-7d05-446c-92ef-eab78f4db8fe","resolution":{"observed_at":"2026-08-05T22:07:42.028159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.033071Z","title":"Rossi, Branislav Kveton, Dongruo Zhou, Julian McAuley, and Lina Yao","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.033071Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4519b45f79f3a5157cc22cfd9942a144560dc5f5eae812928553ce8b6ece233c","observation_id":"9a683da6-de20-4caf-9efe-b95b73f4341f","resolution":{"observed_at":"2026-08-05T22:07:42.033071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.044022Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.044022Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ce57768aabe02d4146892c81b243428d10f256458b41fd9407515c37764b9d54","observation_id":"6e38ba06-2fd4-4b99-b0eb-83b24089da4f","resolution":{"observed_at":"2026-08-05T22:07:42.044022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.16505","last_updated":"2024-01-30T03:17:26Z","snapshot_observed_at":"2026-07-06T16:12:38.269310Z","submitted_at":"2023-08-31T07:36:44Z","title":"Recommender AI Agent: Integrating Large Language Models for Interactive Recommendations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.16505","snapshot_observed_at":"2026-08-05T22:07:42.048873Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.048873Z"},"links":{"cited_paper":"/paper/2308.16505","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:10be3a90dff6576b3c4eb60bbaffc4afe695b670ead79e152a03ba0bae6a2234","observation_id":"f71597fe-86ea-46d8-b771-034a7436c20d","resolution":{"observed_at":"2026-08-05T22:07:42.048873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.27771","last_updated":"2026-04-04T07:45:49Z","snapshot_observed_at":"2026-07-06T22:51:00.579062Z","submitted_at":"2026-03-29T17:10:28Z","title":"Emergent Social Intelligence Risks in Generative Multi-Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.27771","snapshot_observed_at":"2026-08-05T22:07:42.054451Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.054451Z"},"links":{"cited_paper":"/paper/2603.27771","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:fbc969e1830ec868e63b97aa51f8804451a5e61756d6c33b50b0175b5ad1873b","observation_id":"59eaeefa-68d5-4318-a7a8-091bc77fa2dd","resolution":{"observed_at":"2026-08-05T22:07:42.054451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.061081Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.061081Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:29c4cfcb55d21c82dcd74e089e230acc9b573253193969053f83918cd61db877","observation_id":"bdc92014-0cdf-46ef-9494-910d615f5609","resolution":{"observed_at":"2026-08-05T22:07:42.061081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.066394Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.066394Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:2f04608a032d63cc96babf08c70df7c437a25b3f1a5954057c81d2f5bb2bd48c","observation_id":"610b611c-038a-4192-8c3e-f0280ef12163","resolution":{"observed_at":"2026-08-05T22:07:42.066394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.00331","last_updated":"2024-11-01T03:09:28Z","snapshot_observed_at":"2026-08-09T08:32:05.511056Z","submitted_at":"2024-11-01T03:09:28Z","title":"Beyond Utility: Evaluating LLM as Recommender","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.00331","snapshot_observed_at":"2026-08-05T22:07:42.071203Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.071203Z"},"links":{"cited_paper":"/paper/2411.00331","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:f12a192976cbc40b8d87456897ce14346db0a143143b653ae4da886588a39f07","observation_id":"1977d10e-edd1-4207-9423-e3364a2934eb","resolution":{"observed_at":"2026-08-05T22:07:42.071203Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.076356Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.076356Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:203415c03a8f7975e302df36210726ab8c2965c2572bd935e580d16ee50a7ad9","observation_id":"53a017fd-4867-467b-b449-4fc85e553e8c","resolution":{"observed_at":"2026-08-05T22:07:42.076356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.080583Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.080583Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:8a40d96c8ef4128ba1791ebbb4c506c99f0bd649443517312119a9b742fd82fc","observation_id":"e27e2c99-a118-401f-936c-a594e0e53cf2","resolution":{"observed_at":"2026-08-05T22:07:42.080583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.084607Z","title":"2025.LangManus: A Community-Driven AI Automation Framework","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.084607Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:958672e9e4cd14c2f8902fd14a31ad40210726be02d21d5b104c993a35ae3740","observation_id":"0886bdba-5516-4cc2-b8d0-77c7f16ca71c","resolution":{"observed_at":"2026-08-05T22:07:42.084607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07283","last_updated":"2024-10-09T11:01:29Z","snapshot_observed_at":"2026-08-02T17:12:52.352951Z","submitted_at":"2024-10-09T11:01:29Z","title":"Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07283","snapshot_observed_at":"2026-08-05T22:07:42.088799Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.088799Z"},"links":{"cited_paper":"/paper/2410.07283","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:373f8632f5d3926f2c30dbcb577572ff60fa09b053cd699af79df63f97ffed26","observation_id":"89d322d8-b654-44c1-a876-e688e4963e1c","resolution":{"observed_at":"2026-08-05T22:07:42.088799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.093397Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.093397Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:7fec60e03cd4e271a8f409c615c2abfbca1a46e57a6b86866a3d1007bfe9d0c6","observation_id":"a918ab4c-7cf2-45fc-a412-cbac8ba08dbe","resolution":{"observed_at":"2026-08-05T22:07:42.093397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.24961","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:45.740624Z","title":null,"venue":null,"work_id":"9e1e120a-c49d-47d6-9ba2-2943e45921f2","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.098094Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:d4412bdb215ab5a21e16c7b064b69db71e74865046d4428edef4ad4a5401447b","observation_id":"0d9f6804-9d18-4497-878e-83ac7e15789e","resolution":{"observed_at":"2026-08-05T22:07:45.749588Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.102489Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.102489Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:eaf9cb79feb81eebcdcaabf5e9c6a8cb91799c1cd6e11f41664c5c6bb1b9124f","observation_id":"73f620cc-c66d-4b0a-a0fb-f8955ab519ba","resolution":{"observed_at":"2026-08-05T22:07:42.102489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2512.04129","last_updated":"2026-05-04T17:10:23Z","snapshot_observed_at":"2026-07-06T22:37:41.555068Z","submitted_at":"2025-12-03T05:10:39Z","title":"Don't Trust Your Upstream: Exploiting LLM Multi-Agent System via Topology-Guided Adversarial Propagation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.04129","snapshot_observed_at":"2026-08-05T22:07:42.107249Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.107249Z"},"links":{"cited_paper":"/paper/2512.04129","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:50bbcccddb3de8e9a2de375c0bccfee9a1f992c9e04ebb81afdf808ea0826d56","observation_id":"1b6d963f-12aa-4677-b10f-4d9438f9dfe5","resolution":{"observed_at":"2026-08-05T22:07:42.107249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2022.31832","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:45.498542Z","title":null,"venue":null,"work_id":"1eca62a1-f304-4886-a0c6-ebbca2085709","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.112964Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:60684db88d9d925f98b19c17180bfef3c4d50b77f84890772ebb351e6e24606a","observation_id":"9f445b20-d7c0-49ab-9aa2-a4fa03148c4e","resolution":{"observed_at":"2026-08-05T22:07:45.511587Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.04668","last_updated":"2026-06-03T14:38:00Z","snapshot_observed_at":"2026-08-09T19:47:53.671406Z","submitted_at":"2025-12-04T11:00:49Z","title":"Topology Matters: Measuring Memory Leakage in Multi-Agent LLMs","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.04668","snapshot_observed_at":"2026-08-05T22:07:42.117389Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.117389Z"},"links":{"cited_paper":"/paper/2512.04668","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:911eac13a490981e322b695fb695763e8966babc6f36242b675b7c126f046bd4","observation_id":"0e0a5a4f-9b15-43e1-b166-c441d4449e93","resolution":{"observed_at":"2026-08-05T22:07:42.117389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13843","last_updated":"2025-04-18T07:48:48Z","snapshot_observed_at":"2026-08-07T18:04:36.271263Z","submitted_at":"2025-02-19T16:02:59Z","title":"AgentCF++: Memory-enhanced LLM-based Agents for Popularity-aware Cross-domain Recommendations","version":2},"cited_work":{"arxiv_id":"2502.13843","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.13843","snapshot_observed_at":"2026-08-05T22:07:45.371013Z","title":"AgentCF++: Memory-enhanced LLM-based Agents for Popularity-aware Cross-domain Recommendations","venue":"cs.IR","work_id":"8c5efffe-de14-4a51-a02f-2bec1d5693b4","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.122371Z"},"links":{"cited_paper":"/paper/2502.13843","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:906ec73380839faf9ee7a38849d162a5f078b5ebf8d79eb82e700ade52d249f8","observation_id":"a9cd9016-96ca-42ac-8d73-99bd968b4fde","resolution":{"observed_at":"2026-08-05T22:07:45.379875Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2507.02097","last_updated":"2026-06-28T08:31:01Z","snapshot_observed_at":"2026-08-09T11:24:16.930814Z","submitted_at":"2025-07-02T19:25:44Z","title":"The Future is Agentic: Definitions, Perspectives, and Open Challenges of Multi-Agent Recommender Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.02097","snapshot_observed_at":"2026-08-05T22:07:42.127358Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.127358Z"},"links":{"cited_paper":"/paper/2507.02097","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e4fafddb31863b6f086f6a408ba6f7ddcdd5f4b69e8cab4242d3cd11f198840c","observation_id":"3de6567c-2c76-4499-bf52-ae0d5c9868da","resolution":{"observed_at":"2026-08-05T22:07:42.127358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.08127","last_updated":"2026-04-25T05:20:29Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-08-11T16:04:47Z","title":"BlindGuard: Safeguarding LLM-based Multi-Agent Systems under Unknown Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.08127","snapshot_observed_at":"2026-08-05T22:07:42.132270Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.132270Z"},"links":{"cited_paper":"/paper/2508.08127","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e97b293f3bda2e23c0d11db17889d6bf0c93f1716ec9ed4f996a4509ae647109","observation_id":"fe5d1225-a62d-4596-9f50-3176b9b495cb","resolution":{"observed_at":"2026-08-05T22:07:42.132270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14942","last_updated":"2024-04-23T11:36:36Z","snapshot_observed_at":"2026-07-06T18:04:17.561892Z","submitted_at":"2024-04-23T11:36:36Z","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":"2404.14942","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.14942","snapshot_observed_at":"2026-08-05T22:07:45.291131Z","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","venue":"cs.CR","work_id":"c98260f2-db13-42ff-a6b2-2627e7705450","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.138946Z"},"links":{"cited_paper":"/paper/2404.14942","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:6d2268828ded75a89cf77189228355db6d52e7e74ab73addd43908de31032283","observation_id":"7e78c1c1-df0a-4678-8c2e-f279353e119c","resolution":{"observed_at":"2026-08-05T22:07:45.298537Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11182","last_updated":"2025-04-15T13:37:38Z","snapshot_observed_at":"2026-08-07T16:05:30.951670Z","submitted_at":"2025-04-15T13:37:38Z","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.11182","snapshot_observed_at":"2026-08-05T22:07:42.144046Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.144046Z"},"links":{"cited_paper":"/paper/2504.11182","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:865ecd5ff491ad5de59be9a0ffebd901f6fd6d377c6c42f1b628fa04f94d9dc6","observation_id":"5ea070ab-7bea-4702-a35a-58b1a9b66b95","resolution":{"observed_at":"2026-08-05T22:07:42.144046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.149514Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.149514Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:557d47696dc70cec1fbdcea1862f1672079b230f6adeb955586fbcdcfab50778","observation_id":"fb5a4b14-d9af-4337-9b80-4e52d5019a00","resolution":{"observed_at":"2026-08-05T22:07:42.149514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.154470Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.154470Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:c50afe27fb4a28640d494b19cb869ec76f72eb7f5360d25919b983985c028718","observation_id":"72079a6f-7b88-4d58-808f-5982a4121a03","resolution":{"observed_at":"2026-08-05T22:07:42.154470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.07442","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:45.120223Z","title":null,"venue":null,"work_id":"b54c2adf-35e0-4a9e-84f2-0c69460f79c0","year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.158797Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4c659e632ab93b82844efacc1961d1a476dfb2b92339d114be9cef59d739c9cd","observation_id":"fd741f99-4a97-45dc-9aa4-26a0e031417a","resolution":{"observed_at":"2026-08-05T22:07:45.129151Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.163183Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.163183Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:cb16dbe3f00f6899b504d8e21fad6f1bebccc8e6804398ef6fe6174cc670a0e8","observation_id":"905baf38-cfda-4a31-b900-6cfdd6a618f9","resolution":{"observed_at":"2026-08-05T22:07:42.163183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.168040Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.168040Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:4fece6793142800b4ce0d983c1a32fcfa2f71d5e202b080b350b91328e17037d","observation_id":"cff18793-a605-4e69-bb3a-82927e1b4708","resolution":{"observed_at":"2026-08-05T22:07:42.168040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10050","last_updated":"2025-02-14T09:57:07Z","snapshot_observed_at":"2026-08-08T03:23:23.737248Z","submitted_at":"2025-02-14T09:57:07Z","title":"A Survey on LLM-powered Agents for Recommender Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.10050","snapshot_observed_at":"2026-08-05T22:07:42.172329Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.172329Z"},"links":{"cited_paper":"/paper/2502.10050","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:61702d9bf6a63b0ba908b83c7b6bd37bd5403451b1e8e9b050c05d569e85aa92","observation_id":"81b4864b-5769-4208-a616-bba3c794af9c","resolution":{"observed_at":"2026-08-05T22:07:42.172329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4915.36094","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.899915Z","title":null,"venue":null,"work_id":"aac980fe-b59a-4017-837a-6e7aeee83568","year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.177444Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:8c98d02128be157c37d4465b776d96e6bafb2327ea236bb579c6b1aed01cd9ed","observation_id":"b885f98b-df86-4fc3-929a-e72b4c7fd97f","resolution":{"observed_at":"2026-08-05T22:07:44.916018Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19623","last_updated":"2025-05-28T14:32:56Z","snapshot_observed_at":"2026-08-07T14:07:44.224059Z","submitted_at":"2025-05-26T07:45:11Z","title":"AgentRecBench: Benchmarking LLM Agent-based Personalized Recommender Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19623","snapshot_observed_at":"2026-08-05T22:07:42.181996Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.181996Z"},"links":{"cited_paper":"/paper/2505.19623","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:b768be7723d52e1f9a9cb52eef9b8da896685de98f83414d74e0aab189139008","observation_id":"2eaa5503-accf-40d0-baa6-04bfe0564fff","resolution":{"observed_at":"2026-08-05T22:07:42.181996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.23352","last_updated":"2025-05-29T11:21:48Z","snapshot_observed_at":"2026-08-07T22:44:06.969706Z","submitted_at":"2025-05-29T11:21:48Z","title":"Understanding the Information Propagation Effects of Communication Topologies in LLM-based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.23352","snapshot_observed_at":"2026-08-05T22:07:42.187727Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.187727Z"},"links":{"cited_paper":"/paper/2505.23352","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:5387c9a9aa80af781c79cf684633ece21b9c4e7df2d2c662a0f8581233dd0aeb","observation_id":"4ca546f7-74d5-4c37-a494-20a62dcb1c0f","resolution":{"observed_at":"2026-08-05T22:07:42.187727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.192963Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.192963Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:d6f89325b9517149dedc42bf7787500e6cbc20b97a96aa7be4c056e178431412","observation_id":"9ce8dabc-9440-44ad-93a3-d07b341271b6","resolution":{"observed_at":"2026-08-05T22:07:42.192963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2602.21447","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.661193Z","title":null,"venue":null,"work_id":"fa6d9ec9-cdb4-45c6-b7e1-48e2f1441e1e","year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.197595Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:21d0cb8196847946494cb548617113099fdbeefc4ad8f138a096056c3cf19eb2","observation_id":"caebc462-542d-40c8-be2a-87a93b416e60","resolution":{"observed_at":"2026-08-05T22:07:44.670536Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.19855","last_updated":"2024-10-22T14:11:26Z","snapshot_observed_at":"2026-07-06T19:39:55.766423Z","submitted_at":"2024-10-22T14:11:26Z","title":"Personalized Recommendation Systems using Multimodal, Autonomous, Multi Agent Systems","version":1},"cited_work":{"arxiv_id":"2410.19855","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.19855","snapshot_observed_at":"2026-08-05T22:07:44.564977Z","title":"Personalized Recommendation Systems using Multimodal, Autonomous, Multi Agent Systems","venue":"cs.IR","work_id":"1d31ce7a-b649-47b5-b2c3-9d00361351a4","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.202065Z"},"links":{"cited_paper":"/paper/2410.19855","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:124b907cf80dccdbfb5c1edeb3e9db835cef3d1aa7184d9268512e221aa6403d","observation_id":"935e4329-0012-44a4-8c48-e8fc5a505df9","resolution":{"observed_at":"2026-08-05T22:07:44.573492Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2603.28476","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.526140Z","title":null,"venue":null,"work_id":"3f239869-4b44-4a49-a7ad-4d97efee1746","year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.207877Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:af2362f29a72ad4bcf2b9f341bee33c5c177975003c67e19dced1f7438716e9d","observation_id":"b83d3335-8d72-485d-bce1-9de5713c2109","resolution":{"observed_at":"2026-08-05T22:07:44.540455Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.12188","last_updated":"2025-09-12T19:53:17Z","snapshot_observed_at":"2026-08-07T17:01:45.148471Z","submitted_at":"2025-03-15T16:16:08Z","title":"Multi-Agent Systems Execute Arbitrary Malicious Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.12188","snapshot_observed_at":"2026-08-05T22:07:42.214656Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.214656Z"},"links":{"cited_paper":"/paper/2503.12188","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e26ccfe191a5644c5712f0cb4d0c46eead6a3052911f7152219df6b32ca6ce9e","observation_id":"e69bc127-7d6e-4261-86b0-333670b84d27","resolution":{"observed_at":"2026-08-05T22:07:42.214656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.12442","last_updated":"2025-06-17T15:37:58Z","snapshot_observed_at":"2026-08-07T15:43:38.945053Z","submitted_at":"2025-05-18T14:31:45Z","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.12442","snapshot_observed_at":"2026-08-05T22:07:42.219855Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.219855Z"},"links":{"cited_paper":"/paper/2505.12442","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:83484607071cb75bd77ae208db3c423929274ac351f9c60a32d70573e5853e96","observation_id":"03059b16-f2ae-48d1-bbd0-fcca57eaf516","resolution":{"observed_at":"2026-08-05T22:07:42.219855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.02552","last_updated":"2024-02-15T11:34:29Z","snapshot_observed_at":"2026-08-09T13:02:22.342942Z","submitted_at":"2023-06-05T02:58:35Z","title":"User Behavior Simulation with Large Language Model based Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.02552","snapshot_observed_at":"2026-08-05T22:07:42.224736Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.224736Z"},"links":{"cited_paper":"/paper/2306.02552","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e8be1df1f534fd23826a29cba92141be8a70db6aa09bc0cf7a6412a294b2ef8d","observation_id":"abbfc0f4-2503-41e8-92e0-3e2dac3c51ba","resolution":{"observed_at":"2026-08-05T22:07:42.224736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.11127","last_updated":"2025-02-16T13:48:41Z","snapshot_observed_at":"2026-08-07T18:14:46.655001Z","submitted_at":"2025-02-16T13:48:41Z","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.11127","snapshot_observed_at":"2026-08-05T22:07:42.230156Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.230156Z"},"links":{"cited_paper":"/paper/2502.11127","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:910c2565e55bc1bdf7ed5e5d3025aa458287a5f6bc08e706b42632d343e5f194","observation_id":"87fdf0a1-cd1a-4a82-9ec5-fd17ce869322","resolution":{"observed_at":"2026-08-05T22:07:42.230156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.17918","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.321182Z","title":null,"venue":null,"work_id":"4ae61804-ef48-4dd5-ab5c-0016b377aaf4","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.235270Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:2904815ea513637ccb345783bd376b4de9b0121ebf4ec9df1f61b5aeebb25089","observation_id":"575bb3fb-28d5-417c-8aa9-305e000ffdcb","resolution":{"observed_at":"2026-08-05T22:07:44.334270Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.14296","last_updated":"2024-03-20T18:13:10Z","snapshot_observed_at":"2026-07-06T16:11:02.763364Z","submitted_at":"2023-08-28T04:31:04Z","title":"RecMind: Large Language Model Powered Agent For Recommendation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.14296","snapshot_observed_at":"2026-08-05T22:07:42.239519Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.239519Z"},"links":{"cited_paper":"/paper/2308.14296","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:0197c4faead2c23371a2373a20981d33370677d08190769183200a0a0c171824","observation_id":"fea13fb5-8067-439e-9d30-f02ebbfa8b5a","resolution":{"observed_at":"2026-08-05T22:07:42.239519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03703","last_updated":"2025-09-12T02:59:56Z","snapshot_observed_at":"2026-08-06T15:48:07.392556Z","submitted_at":"2025-07-20T05:03:02Z","title":"Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective","version":2},"cited_work":{"arxiv_id":"2508.03703","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.03703","snapshot_observed_at":"2026-08-05T22:07:44.207441Z","title":"Privacy Risks of LLM-Empowered Recommender Systems: An Inversion Attack Perspective","venue":"cs.IR","work_id":"afca5aa7-e7cd-488a-96c5-48c455cbb9cc","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.244283Z"},"links":{"cited_paper":"/paper/2508.03703","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:62ebf7582379bd3479a8fb559101c75039a07cc4986ddc675be2afe3d1341221","observation_id":"101bfe2f-0936-4977-b21d-c8267b30d5b1","resolution":{"observed_at":"2026-08-05T22:07:44.212959Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.11690","last_updated":"2025-04-28T15:39:28Z","snapshot_observed_at":"2026-08-06T19:08:45.069639Z","submitted_at":"2024-09-18T04:10:44Z","title":"ID-Free Not Risk-Free: LLM-Powered Agents Unveil Risks in ID-Free Recommender Systems","version":3},"cited_work":{"arxiv_id":"2409.11690","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.11690","snapshot_observed_at":"2026-08-05T22:07:44.181470Z","title":"ID-Free Not Risk-Free: LLM-Powered Agents Unveil Risks in ID-Free Recommender Systems","venue":"cs.IR","work_id":"5b391ce5-b6d6-4f94-964b-7fe60255adff","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.250218Z"},"links":{"cited_paper":"/paper/2409.11690","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:08e3e25e2b358daa59a544d94e0c0eade89a9b23421df45b92647fb40a179d7c","observation_id":"80287501-b091-4c44-af1f-525cfe56d01d","resolution":{"observed_at":"2026-08-05T22:07:44.187600Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.05845","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:44.139912Z","title":null,"venue":null,"work_id":"5a544851-0731-43ba-a38c-cbd94f8c069a","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.254944Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:792c7cf9dd9e1fea7165cbe344934df31c388b1fda417e6387e645924a39dfce","observation_id":"0558f9d5-8443-4cbe-93bc-4872041deee9","resolution":{"observed_at":"2026-08-05T22:07:44.152402Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.259956Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.259956Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:993b4ebea86410d219e9ac0f68aba8c1dc2bc27e1041a0f4ffa64c3de3b9f6ad","observation_id":"0bfc9218-d90d-4b9a-982f-4d13381a40e2","resolution":{"observed_at":"2026-08-05T22:07:42.259956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.01022","last_updated":"2024-06-05T07:30:59Z","snapshot_observed_at":"2026-07-06T18:24:13.721696Z","submitted_at":"2024-06-03T06:08:02Z","title":"Poisoning Attacks and Defenses in Recommender Systems: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.01022","snapshot_observed_at":"2026-08-05T22:07:42.264460Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.264460Z"},"links":{"cited_paper":"/paper/2406.01022","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:1ce9e5b2f4068aec8a35127ca7fc707df36a177bfed79e65e80e2c9b6ecbc0bc","observation_id":"a50f4c4a-7e93-493f-b71f-638d53503a0f","resolution":{"observed_at":"2026-08-05T22:07:42.264460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.269373Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.269373Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:f13cdcdddda0f717c6ef6535f3210d7fbaa110e82b313f61eab9bad42c2104e6","observation_id":"11eecb77-fd99-4ee8-9ae3-2d1667d75f84","resolution":{"observed_at":"2026-08-05T22:07:42.269373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.274137Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.274137Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:314819b777d6320c2321ea6746de0236c3970084720f7d86408d771ce5ce421e","observation_id":"b7bda5d9-e9f5-4733-8a73-76d581ad0f2a","resolution":{"observed_at":"2026-08-05T22:07:42.274137Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.13700","last_updated":"2024-09-05T02:47:49Z","snapshot_observed_at":"2026-07-06T19:18:53.582890Z","submitted_at":"2024-09-05T02:47:49Z","title":"MAS4POI: a Multi-Agents Collaboration System for Next POI Recommendation","version":1},"cited_work":{"arxiv_id":"2409.13700","doi":null,"metadata_source":"pith","pith_arxiv_id":"2409.13700","snapshot_observed_at":"2026-08-05T22:07:43.898233Z","title":"MAS4POI: a Multi-Agents Collaboration System for Next POI Recommendation","venue":"cs.IR","work_id":"ea2407e5-93c8-41e4-a7e2-484d1f22ca82","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.279120Z"},"links":{"cited_paper":"/paper/2409.13700","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:be501b17b18b618d5bac8d53a948c777bfdfb2072b0b49a19043e1b28ef82b30","observation_id":"7b37eb5e-ae22-48e6-ad75-92e9b722cb74","resolution":{"observed_at":"2026-08-05T22:07:43.904102Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03995","last_updated":"2023-05-06T10:04:43Z","snapshot_observed_at":"2026-07-06T15:24:04.050068Z","submitted_at":"2023-05-06T10:04:43Z","title":"Attacking Pre-trained Recommendation","version":1},"cited_work":{"arxiv_id":"2305.03995","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.03995","snapshot_observed_at":"2026-08-05T22:07:43.867167Z","title":"Attacking Pre-trained Recommendation","venue":"cs.IR","work_id":"6465811e-22f6-4d62-9e58-a1675cfb853b","year":2023},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.283770Z"},"links":{"cited_paper":"/paper/2305.03995","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:482e7cb26981ff526a073366791806a5c4379c14aa1d0b338ddb1d2fab95869f","observation_id":"6c0e19f1-5b3f-401e-8cdc-3a9ab683d2bc","resolution":{"observed_at":"2026-08-05T22:07:43.874690Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.09230","last_updated":"2025-08-12T07:48:51Z","snapshot_observed_at":"2026-08-05T21:24:36.962448Z","submitted_at":"2025-08-12T07:48:51Z","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":"2508.09230","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.09230","snapshot_observed_at":"2026-08-05T22:07:43.829210Z","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","venue":"cs.MA","work_id":"3e01d77e-8d08-4e72-8372-ccd1e58f8a31","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.288855Z"},"links":{"cited_paper":"/paper/2508.09230","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:b1a683ed27830777daf7fd1f1892171797388cba0f75ec3cbf036fa4a7237718","observation_id":"9414fe2a-8a4e-4c44-a17e-1af7a376308f","resolution":{"observed_at":"2026-08-05T22:07:43.837793Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.294040Z","title":"Rossi, and Julian McAuley","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.294040Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:25c87da9f8eca92b228c1213cc2a2e324d82b18725ee2f23c47dcae6e38de1bc","observation_id":"58d5e141-48ac-4238-8b76-148787a807e8","resolution":{"observed_at":"2026-08-05T22:07:42.294040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.299672Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.299672Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:1bd0e838621d0558b65e293bad01d0a8fbebebb718f66f70624ab2fa188bec8e","observation_id":"cc04cd91-635e-4690-9947-c414885eb1b6","resolution":{"observed_at":"2026-08-05T22:07:42.299672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.03125","last_updated":"2025-08-05T06:14:53Z","snapshot_observed_at":"2026-08-06T08:33:34.142274Z","submitted_at":"2025-08-05T06:14:53Z","title":"Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.03125","snapshot_observed_at":"2026-08-05T22:07:42.304265Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.304265Z"},"links":{"cited_paper":"/paper/2508.03125","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:75d8ddb96bebc9d074d109b6067d22d6e752ebe4895ed8eeb4b31f1316e53d8f","observation_id":"8909be5d-67d9-4685-99c1-96fccbf5d288","resolution":{"observed_at":"2026-08-05T22:07:42.304265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.310859Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.310859Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:5edea9c6e8a5879d3a8b4da89b88949a8d12b68e34ccd7e54c7854707a3da41d","observation_id":"6c5e539a-e447-4add-a245-abc85d3f13a6","resolution":{"observed_at":"2026-08-05T22:07:42.310859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.15252","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:43.474536Z","title":null,"venue":null,"work_id":"1c4325ce-f8a8-4735-b6ba-7ba63909c779","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.316247Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:95e598f10a3914949386ced85c17e429541696778d2ce6f058e0088dfad54175","observation_id":"8742030f-c040-4eff-a28d-2b1c2e3576d6","resolution":{"observed_at":"2026-08-05T22:07:43.482234Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.23485","last_updated":"2025-06-30T03:15:50Z","snapshot_observed_at":"2026-08-07T07:21:39.542153Z","submitted_at":"2025-06-30T03:15:50Z","title":"Thought-Augmented Planning for LLM-Powered Interactive Recommender Agent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.23485","snapshot_observed_at":"2026-08-05T22:07:42.320972Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.320972Z"},"links":{"cited_paper":"/paper/2506.23485","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:715bf55d647314cd3c971556c037fc35eabf8845d936a6153e03c2898cc83726","observation_id":"8a5b0b76-5044-4549-8ce0-7f7fa514c103","resolution":{"observed_at":"2026-08-05T22:07:42.320972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15686","last_updated":"2024-10-21T06:54:27Z","snapshot_observed_at":"2026-08-04T07:28:02.629995Z","submitted_at":"2024-10-21T06:54:27Z","title":"NetSafe: Exploring the Topological Safety of Multi-agent Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15686","snapshot_observed_at":"2026-08-05T22:07:42.326351Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.326351Z"},"links":{"cited_paper":"/paper/2410.15686","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:01d6579624d728e6f230fc5f753632a0462eb95d986c02d8cc24c711629b9561","observation_id":"439bf9dd-7411-49ef-9973-ca45d445ff62","resolution":{"observed_at":"2026-08-05T22:07:42.326351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.02691","last_updated":"2024-08-04T04:52:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-05T06:21:45Z","title":"InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.02691","snapshot_observed_at":"2026-08-05T22:07:42.331664Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.331664Z"},"links":{"cited_paper":"/paper/2403.02691","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:94e4d9d32b1c04e17a25ba612dcbb403c317b9c1662c1233d5a1b55d7221e138","observation_id":"78a43e56-50fe-41fd-81b0-f5bcdc1ea509","resolution":{"observed_at":"2026-08-05T22:07:42.331664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02644","snapshot_observed_at":"2026-08-05T22:07:42.341577Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.341577Z"},"links":{"cited_paper":"/paper/2410.02644","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ac08c84897cde7b9f64cd6ca5aa92c2857f59a5b456ea18b1b3410657f242877","observation_id":"346400ab-e9b8-4080-a79c-4f1a54e50461","resolution":{"observed_at":"2026-08-05T22:07:42.341577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18240","last_updated":"2024-03-05T12:14:52Z","snapshot_observed_at":"2026-08-06T16:33:18.928500Z","submitted_at":"2024-02-28T11:12:17Z","title":"Prospect Personalized Recommendation on Large Language Model-based Agent Platform","version":2},"cited_work":{"arxiv_id":"2402.18240","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.18240","snapshot_observed_at":"2026-08-05T22:07:43.211618Z","title":"Prospect Personalized Recommendation on Large Language Model-based Agent Platform","venue":"cs.IR","work_id":"b87f50ac-f751-437e-b343-222b623fd95d","year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.346584Z"},"links":{"cited_paper":"/paper/2402.18240","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:3bf0188703de827dfebf23a9822754709b580b529459a8ba88fb6e66b96571fb","observation_id":"85b5c48f-bdc5-48ce-85aa-e2c0d52a8c54","resolution":{"observed_at":"2026-08-05T22:07:43.217930Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.351654Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.351654Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:abceb323fb2d4a0203075af9d147b3ce4914e2e0a75cbcf5395ce230a35621e2","observation_id":"60c99874-77ac-444c-adbd-9f4b9a04b346","resolution":{"observed_at":"2026-08-05T22:07:42.351654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.357017Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.357017Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:06cb4a608237e620b74d1fb80f2085da849719af26c18e9a360631e4be5c5fb3","observation_id":"ef1fb838-c6ac-4688-84e6-a5fb717c1e27","resolution":{"observed_at":"2026-08-05T22:07:42.357017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0120.34847","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:43.052116Z","title":null,"venue":null,"work_id":"beaadf90-1c28-486a-bf70-24190a21906a","year":2021},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.370072Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:51d65a8251f7fcf6a393c7cd04ca3d24b3cbc51abf3c8db1dad634f81b157d40","observation_id":"91de21b6-0ff6-4a3f-b710-1659bc4be95c","resolution":{"observed_at":"2026-08-05T22:07:43.061541Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.374894Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.374894Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:91a5f1121f426d34bcf5ad6990e6439e11cc0b8d335e7d65b9f735718c2bc8a2","observation_id":"d9d901a0-45a7-4f58-a56a-2de0a9ba6160","resolution":{"observed_at":"2026-08-05T22:07:42.374894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.03051","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.927834Z","title":null,"venue":null,"work_id":"39fb866f-2a7c-4ef0-9ae1-e589b2f186a8","year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.386272Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:9b1bcc0d4421e3ee536c353d3268bd52e7fa3124feac915451928f8907b9e11b","observation_id":"f4f9c5fb-db37-4daf-b69b-1012ded06d31","resolution":{"observed_at":"2026-08-05T22:07:42.936088Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.11880","last_updated":"2024-08-20T06:45:50Z","snapshot_observed_at":"2026-07-06T17:18:44.456380Z","submitted_at":"2024-01-22T12:11:55Z","title":"PsySafe: A Comprehensive Framework for Psychological-based Attack, Defense, and Evaluation of Multi-agent System Safety","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.11880","snapshot_observed_at":"2026-08-05T22:07:42.392385Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.392385Z"},"links":{"cited_paper":"/paper/2401.11880","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:e130a07267082454ca3b7b610da904a069ea23469c4d196c64180100f5e2f250","observation_id":"cf807d47-06b8-4406-aeb8-fcfa3025a60c","resolution":{"observed_at":"2026-08-05T22:07:42.392385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17196","last_updated":"2024-04-26T07:11:18Z","snapshot_observed_at":"2026-07-06T18:05:59.538624Z","submitted_at":"2024-04-26T07:11:18Z","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.17196","snapshot_observed_at":"2026-08-05T22:07:42.380854Z","title":"arXiv:2404.17196 https://arxiv.org/abs/2404.17196","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.380854Z"},"links":{"cited_paper":"/paper/2404.17196","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:7891159bd3bf5082e181b8d0e51547b04af094088470cfb2cb3fc8c13c2ef995","observation_id":"85c35185-f384-4a9f-8229-133d41cc3ed6","resolution":{"observed_at":"2026-08-05T22:07:42.380854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.409952Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.409952Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:636a96fa0c063b2aa60b1d33fff40734ee35b61d450bef97890a858054cd356b","observation_id":"ae47a06c-43cb-41c7-9970-607b6162e1d3","resolution":{"observed_at":"2026-08-05T22:07:42.409952Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.415294Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.415294Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:8c171ed75bac719af3c591b58ac90818c3e05f098c642636068e625dab880c39","observation_id":"bb307ac2-f2a2-48ff-be59-3f140c3025a6","resolution":{"observed_at":"2026-08-05T22:07:42.415294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.402685Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.402685Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:373201b39781e6840c73eb9a83e8a2b3dc0a12d38c2592f6444ff396db2f0417","observation_id":"609589b8-4287-4171-8440-3640387bbfbb","resolution":{"observed_at":"2026-08-05T22:07:42.402685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.08035","last_updated":"2024-05-13T03:02:56Z","snapshot_observed_at":"2026-07-06T18:13:46.440138Z","submitted_at":"2024-05-13T03:02:56Z","title":"A LLM-based Controllable, Scalable, Human-Involved User Simulator Framework for Conversational Recommender Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.08035","snapshot_observed_at":"2026-08-05T22:07:42.426490Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.426490Z"},"links":{"cited_paper":"/paper/2405.08035","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:90ebc8a1e522a8e908f92e1064acc23ae1b844818fa797c89dd3133f618e1d8a","observation_id":"f7a37788-e974-4ad6-bed9-2ff4a29118e2","resolution":{"observed_at":"2026-08-05T22:07:42.426490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T22:07:42.432678Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.432678Z"},"links":{"citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:f1fec0bcc72ed1ce0b1a9fed6f31c254740fc5508846b2a8af4d2dc41f9fbf9e","observation_id":"f099c07c-9901-4f45-9426-f7c89ec84bd2","resolution":{"observed_at":"2026-08-05T22:07:42.432678Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.14529","last_updated":"2025-02-20T13:02:00Z","snapshot_observed_at":"2026-08-07T18:02:05.606032Z","submitted_at":"2025-02-20T13:02:00Z","title":"CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.14529","snapshot_observed_at":"2026-08-05T22:07:42.420500Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.420500Z"},"links":{"cited_paper":"/paper/2502.14529","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ce99e54d8757de4dd07baad4b5e0eb3e6b44d60de2ea08a7ed064329631fb4c4","observation_id":"41c32daa-f432-43b2-bd24-b500288f842e","resolution":{"observed_at":"2026-08-05T22:07:42.420500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14836","last_updated":"2024-06-05T17:02:47Z","snapshot_observed_at":"2026-07-06T17:34:11.950339Z","submitted_at":"2024-02-18T16:51:02Z","title":"Stealthy Attack on Large Language Model based Recommendation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14836","snapshot_observed_at":"2026-08-05T22:07:42.363853Z","title":"arXiv:2402.14836 https://arxiv.org/abs/2402.14836","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.363853Z"},"links":{"cited_paper":"/paper/2402.14836","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:adf30461896eaf874e614b2a12398983446514a9313c029d0f2f185cc4f513c4","observation_id":"b44ce838-e91c-4b6c-86ab-2938bf4a8572","resolution":{"observed_at":"2026-08-05T22:07:42.363853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16734","last_updated":"2025-03-20T22:37:15Z","snapshot_observed_at":"2026-08-10T01:12:49.504662Z","submitted_at":"2025-03-20T22:37:15Z","title":"Towards Agentic Recommender Systems in the Era of Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16734","snapshot_observed_at":"2026-08-05T22:07:42.038221Z","title":"arXiv:2503.16734 [cs.AI] https://arxiv.org/abs/2503.16734","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-05T22:07:42.038221Z"},"links":{"cited_paper":"/paper/2503.16734","citing_paper":"/paper/2608.03272"},"observation_digest":"sha256:ba82f0f5bb3e88991c9bf3ac0ea6c7c4d975bed189174989949e55a4102f7ccb","observation_id":"9e9a32d8-801a-4106-80f1-a2fcb03e24bd","resolution":{"observed_at":"2026-08-05T22:07:42.038221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.03272","last_updated":"2026-08-04T07:49:58Z","latest_version":1,"primary_category":"cs.IR","snapshot_observed_at":"2026-08-08T22:52:38.078964Z","submitted_at":"2026-08-04T07:49:58Z","title":"Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity"},"reference_resolution":{"displayed":85,"state_counts":{"malformed_identifier":0,"metadata_mismatch":3,"parse_uncertain":0,"unresolved":64,"verified_exact":18,"verified_fuzzy":0},"total_outbound_references":85},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 85 of 85 outbound references and 0 inbound Pith citation observations for arXiv:2608.03272."}