{"as_of":"2026-08-10T23:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:925058a1fb791371b9e6323b92be953c121bb597f55f5facc8af923e0222ac87","coverage":[{"denominator":22,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":22,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T04:30:17.488023Z","state":"measured"},{"denominator":22,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":22,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03509/citation-record","integrity":"/paper/2608.03509/integrity","json":"/paper/2608.03509/citation-record.json","paper":"/paper/2608.03509"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.413666Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.413666Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:a75f8c043d6ca95bedc215fe0c9ba6819d5f69576ee2e9e551e3944942b84be2","observation_id":"f3be7d9f-05b3-4729-8fab-047f5072bc1a","resolution":{"observed_at":"2026-08-10T04:30:17.413666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.04329","last_updated":"2026-06-18T22:06:23Z","snapshot_observed_at":"2026-08-04T07:47:41.111384Z","submitted_at":"2026-06-03T01:04:13Z","title":"From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.04329","snapshot_observed_at":"2026-08-10T04:30:17.417966Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.417966Z"},"links":{"cited_paper":"/paper/2606.04329","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:6fa379133a641e8144753899141583afa62cc30f625d3f0fcc7f17cb0e623e4d","observation_id":"9b2dbcf1-2595-4b4a-8e01-903a497c055e","resolution":{"observed_at":"2026-08-10T04:30:17.417966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.422145Z","title":"Debenedetti, J","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.422145Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:de7f31f5b3ce659d6fe3ea36a41246346ad752dafc7d42d19a927f446b1119b6","observation_id":"7223c9f3-37ba-4deb-89c5-4b82ee80417e","resolution":{"observed_at":"2026-08-10T04:30:17.422145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.425647Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.425647Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:8ac1044b8e28b7f0fe206c8b5f1db2bffe35565e8c757ef150204761f294406a","observation_id":"3050acb2-17df-43f9-9d5e-daa1ada18d88","resolution":{"observed_at":"2026-08-10T04:30:17.425647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T04:30:17.429016Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.429016Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:2e5d753e4c5a2e44f620d2e732953f3d961001ad4ba9da60fb25d878b4f8f0c6","observation_id":"30aaf2ff-c22c-4ff7-9de7-26fa5b53f0cb","resolution":{"observed_at":"2026-08-10T04:30:17.429016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.24322","last_updated":"2026-06-23T08:57:50Z","snapshot_observed_at":"2026-08-09T03:50:08.272058Z","submitted_at":"2026-06-23T08:57:50Z","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.24322","snapshot_observed_at":"2026-08-10T04:30:17.432890Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.432890Z"},"links":{"cited_paper":"/paper/2606.24322","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:97be2520fb92280049ec15c17971f3db7ed647079316bedb0176f94e279114d6","observation_id":"27c6fb14-cb48-40f6-8bb9-ef39f96651f3","resolution":{"observed_at":"2026-08-10T04:30:17.432890Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.01869","last_updated":"2026-05-28T12:51:20Z","snapshot_observed_at":"2026-08-07T07:48:03.222597Z","submitted_at":"2026-02-02T09:43:12Z","title":"Skill-Pro: Learning Reusable Skills from Experience via Non-Parametric PPO for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.01869","snapshot_observed_at":"2026-08-10T04:30:17.436895Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.436895Z"},"links":{"cited_paper":"/paper/2602.01869","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:4a19333cb9d952b14c6031a87734030954323998888dad1fff2c9148dde6e318","observation_id":"9992dace-f810-4ed5-a172-ed26d1d2ed23","resolution":{"observed_at":"2026-08-10T04:30:17.436895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2603.25158","last_updated":"2026-06-04T12:51:52Z","snapshot_observed_at":"2026-08-06T10:33:38.415457Z","submitted_at":"2026-03-26T08:26:38Z","title":"Trace2Skill: Distill Trajectory-Local Lessons into Transferable Agent Skills","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2603.25158","snapshot_observed_at":"2026-08-10T04:30:17.440509Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.440509Z"},"links":{"cited_paper":"/paper/2603.25158","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:3cb4e97e4c5a6ae974175c2c8e582b98e14e5872682e76024b0c5c3d17f4a501","observation_id":"e17c1100-fe14-4f39-9b88-8a9d04bd339a","resolution":{"observed_at":"2026-08-10T04:30:17.440509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.443983Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.443983Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:4288ef5f52c5ee8b8ccc026ef7d2615d69092165e9e908d3ca7e98104caf15d3","observation_id":"8b80b906-2431-4c3c-bc15-01891995b6bb","resolution":{"observed_at":"2026-08-10T04:30:17.443983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.09316","last_updated":"2026-06-19T10:27:56Z","snapshot_observed_at":"2026-08-07T00:14:36.005862Z","submitted_at":"2026-06-08T10:24:32Z","title":"Anything2Skill: Compiling External Knowledge into Reusable Skills for Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.09316","snapshot_observed_at":"2026-08-10T04:30:17.447263Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.447263Z"},"links":{"cited_paper":"/paper/2606.09316","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:8bff6c2a4354e44392c425b9a4d08d9b5b339ab301187638ea5a661f899d7e69","observation_id":"6c33900c-cd0c-4a20-9d71-0d2af8a86b2b","resolution":{"observed_at":"2026-08-10T04:30:17.447263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.450937Z","title":"Shafahi, W","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.450937Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:ff3a8f3864fb3eddf44f01c292c1b9703639779737315ee60946168db3b963a8","observation_id":"eaed5292-1a86-4ad9-a232-03aeef9cbe88","resolution":{"observed_at":"2026-08-10T04:30:17.450937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.454169Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.454169Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:1ce68bf3b434992cc6787be431f764c114edc47c0805c97a68a13f9a6022d1a4","observation_id":"783dad64-0433-4c34-8c4e-a4a6a3f4ecfe","resolution":{"observed_at":"2026-08-10T04:30:17.454169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.457514Z","title":"Trivedi, T","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.457514Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:1da0133dd9db26c9a9eabc4a28220b03d36415080a88dbf9593bbba66290ae87","observation_id":"cd52dc41-14ee-4fa2-85b5-d18f53f121cd","resolution":{"observed_at":"2026-08-10T04:30:17.457514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.04804","last_updated":"2026-04-19T16:14:01Z","snapshot_observed_at":"2026-07-06T22:53:41.734429Z","submitted_at":"2026-04-06T16:09:33Z","title":"SkillX: Automatically Constructing Skill Knowledge Bases for Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.04804","snapshot_observed_at":"2026-08-10T04:30:17.460917Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.460917Z"},"links":{"cited_paper":"/paper/2604.04804","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:5df2122497508e983edc62e7f6865b769be179177df55453c6146a9664d031ec","observation_id":"e547a20f-2e8d-4384-a42c-cacc6e32b41c","resolution":{"observed_at":"2026-08-10T04:30:17.460917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.18930","last_updated":"2026-05-18T14:08:59Z","snapshot_observed_at":"2026-07-06T23:29:42.583875Z","submitted_at":"2026-05-18T14:08:59Z","title":"OEP: Poisoning Self-Evolving LLM Agents via Locally Correct but Non-Transferable Experiences","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.18930","snapshot_observed_at":"2026-08-10T04:30:17.464357Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.464357Z"},"links":{"cited_paper":"/paper/2605.18930","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:38dedb3cf5bef88f85e7b8281ef0f4814b423f02c6de848c0931449171d90baa","observation_id":"af264448-677f-4f1a-9561-7e773cf2c7fe","resolution":{"observed_at":"2026-08-10T04:30:17.464357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07429","last_updated":"2024-09-11T17:21:00Z","snapshot_observed_at":"2026-08-07T15:35:11.892405Z","submitted_at":"2024-09-11T17:21:00Z","title":"Agent Workflow Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07429","snapshot_observed_at":"2026-08-10T04:30:17.467794Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.467794Z"},"links":{"cited_paper":"/paper/2409.07429","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:dbf22823b1d6ef90a6a0c2bc5032b8eb01ff31171451c8e0f64bddeea29bc7c7","observation_id":"a825894d-8253-471f-a885-b5c3b0d9d6e2","resolution":{"observed_at":"2026-08-10T04:30:17.467794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.471290Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.471290Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:e1b6dff977ededfb36a452c149792a58c438c2927f291d225b99ef67a347abd1","observation_id":"ee1b9701-30c2-4326-b889-a72be2d408d9","resolution":{"observed_at":"2026-08-10T04:30:17.471290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.474509Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.474509Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:e55e3af585c5ef699417a7882c327816c1f6b43d636af23481496ed8433b00d4","observation_id":"037bd6c7-f710-45d6-9057-77bc622d6e93","resolution":{"observed_at":"2026-08-10T04:30:17.474509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.24118","last_updated":"2026-04-27T07:12:52Z","snapshot_observed_at":"2026-07-30T05:21:40.679953Z","submitted_at":"2026-04-27T07:12:52Z","title":"AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.24118","snapshot_observed_at":"2026-08-10T04:30:17.477789Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.477789Z"},"links":{"cited_paper":"/paper/2604.24118","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:5427e22bd2789008049d6164444d71505ea69947ce43eeee35d1499a92a6aaed","observation_id":"5f0beb60-b48e-4f15-8664-142f16e472f1","resolution":{"observed_at":"2026-08-10T04:30:17.477789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.481154Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.481154Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:ab5a7f455c959205711c66c094d3f90df6f6740dece8cf40ccffaca4a35f4bd4","observation_id":"8c2bf115-90d5-4a0a-aeb8-3f58160a9e2f","resolution":{"observed_at":"2026-08-10T04:30:17.481154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T04:30:17.484592Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.484592Z"},"links":{"citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:173d6ae2eaaeb2cf894d3925a9eff6b62eacbba002be2edacf8a596cb4b7c84b","observation_id":"7b399def-ec88-43dc-9e9b-7384eabb56b8","resolution":{"observed_at":"2026-08-10T04:30:17.484592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.02623","last_updated":"2026-04-07T14:45:15Z","snapshot_observed_at":"2026-08-05T14:57:29.112440Z","submitted_at":"2026-04-03T01:25:12Z","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.02623","snapshot_observed_at":"2026-08-10T04:30:17.488023Z","title":"backup”, “archive","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T04:30:17.488023Z"},"links":{"cited_paper":"/paper/2604.02623","citing_paper":"/paper/2608.03509"},"observation_digest":"sha256:9dd89ea72c6e6a79b056aa07835bf9f684c6d3ae5258d1eb82226c8cc710843b","observation_id":"b4028339-bd95-41bb-ac55-be2e635a72c1","resolution":{"observed_at":"2026-08-10T04:30:17.488023Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.03509","last_updated":"2026-08-07T07:07:45Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T23:10:42.869723Z","submitted_at":"2026-08-04T11:51:23Z","title":"SkillJack: Persistent Skill Backdoors in Self-Evolving Agents"},"reference_resolution":{"displayed":22,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":22},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 22 of 22 outbound references and 0 inbound Pith citation observations for arXiv:2608.03509."}