{"as_of":"2026-08-16T01:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7f3e8c21de0a80cef0004c4ee788f46718046959c1ef57d016c57578e61d07dc","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T11:11:41.019247Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.03844/citation-record","integrity":"/paper/2608.03844/integrity","json":"/paper/2608.03844/citation-record.json","paper":"/paper/2608.03844"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"0994.1795","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.302516Z","title":"denotes mean cosine similarity to the nearest victim query","venue":null,"work_id":"982c0b1e-20ae-4cca-8ab1-1dfdb14551c9","year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.009782Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:e28e9c4f34a942657a6a6f5242c6dede4c594f388b4554e7d332b495ea7fe2ba","observation_id":"e768d6ae-457f-407f-b277-df9492b5335e","resolution":{"observed_at":"2026-08-05T11:11:41.310673Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2107.03374","last_updated":"2021-07-14T17:16:02Z","snapshot_observed_at":"2026-08-08T11:58:24.516369Z","submitted_at":"2021-07-07T17:41:24Z","title":"Evaluating Large Language Models Trained on Code","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.03374","snapshot_observed_at":"2026-08-05T11:11:40.899044Z","title":"arXiv preprint arXiv:2107.03374","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.899044Z"},"links":{"cited_paper":"/paper/2107.03374","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:53094b60a7f4586a813c27e375df80bc34c05b1a6b08a803f09f1612c2ea67bb","observation_id":"80340ae7-0d2e-4be6-ae31-a68efa44ba1c","resolution":{"observed_at":"2026-08-05T11:11:40.899044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2546.7120","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.393169Z","title":"Table 6: Retriever-paradigm generalization on MIMIC- III.(a)Macro RIR@ 4 across nine pairs.(b)ASR under the symmetricall-MiniLM-L6-v2retriever","venue":null,"work_id":"e4b1ef3a-2e49-498d-b49e-897dc2141889","year":2018},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.005081Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:527ff07a27d9b0d9b22ff4e4b6b042f8476d6ec7c4cba1ecb52f08945b6c3348","observation_id":"0eabf312-fd05-4a17-a66d-9f892ec2afd1","resolution":{"observed_at":"2026-08-05T11:11:41.404484Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.077625Z","title":"In Findings of the Association for Computational Linguistics: ACL 2025, pages 19796–19821","venue":null,"work_id":"1d60211e-fc05-4a3f-8d1d-f71bcbeea3ec","year":2025},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.914717Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:d10fc5a0294508d2e4578603d6bfbcfaf3813807e4385b7b97d5c99e1d8d2011","observation_id":"fb4edba5-868e-4dbf-9305-7af847e5ac97","resolution":{"observed_at":"2026-08-05T11:11:42.082800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2512.13564","last_updated":"2026-01-13T09:33:57Z","snapshot_observed_at":"2026-08-13T14:23:02.090859Z","submitted_at":"2025-12-15T17:22:34Z","title":"Memory in the Age of AI Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2512.13564","snapshot_observed_at":"2026-08-05T11:11:40.919347Z","title":"arXiv preprint arXiv:2512.13564","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.919347Z"},"links":{"cited_paper":"/paper/2512.13564","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:899baa98fa757b212651973b016c1d284677f728949f5f13e0aace0efc8f83b0","observation_id":"5f271289-b3ae-430b-a993-cf1c58fb51b5","resolution":{"observed_at":"2026-08-05T11:11:40.919347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.06674","last_updated":"2023-12-07T19:40:50Z","snapshot_observed_at":"2026-08-14T15:42:19.849118Z","submitted_at":"2023-12-07T19:40:50Z","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.06674","snapshot_observed_at":"2026-08-05T11:11:40.924507Z","title":"arXiv preprint arXiv:2312.06674","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.924507Z"},"links":{"cited_paper":"/paper/2312.06674","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:3f1cebff28c01157e4d7d60dcf6c580742a0e6d8ec12741e5d38a03c28281196","observation_id":"9f0f457d-c628-4c28-8854-d9a825aa991c","resolution":{"observed_at":"2026-08-05T11:11:40.924507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.940444Z","title":"arXiv preprint arXiv:2501.18492","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.940444Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:9aeaf435e2d571f23b6f4d1cf6825d372a02e3c0c4a68b6697b08e09a9d74c79","observation_id":"33bf24a4-063d-4cf9-9c7f-6d62c2996eb2","resolution":{"observed_at":"2026-08-05T11:11:40.940444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.17318","last_updated":"2025-06-18T14:29:02Z","snapshot_observed_at":"2026-08-12T19:14:55.433341Z","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.17318","snapshot_observed_at":"2026-08-05T11:11:40.945299Z","title":"In Proceedings of the 36th annual acm symposium on user interface software and technology, pages 1–22","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.945299Z"},"links":{"cited_paper":"/paper/2506.17318","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:28d55ab48b75e9ff29d32bcb12deaedbe820c9585f895e47c3bfaa606199862b","observation_id":"88c2e2f8-c8e8-4f19-8a87-23e39c6d2a30","resolution":{"observed_at":"2026-08-05T11:11:40.945299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.954262Z","title":"arXiv preprint arXiv:2602.15344","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.954262Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:02be9fc94f628ab258373392f1ee066539fd84a13a782d6b20ef5f7a0118dd95","observation_id":"eb887256-0e1f-4e48-ae9a-be16a8fbd0db","resolution":{"observed_at":"2026-08-05T11:11:40.954262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.054688Z","title":"In Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing, pages 22315–22339","venue":null,"work_id":"679ec66a-4902-4d0a-a1c9-48b6c5a324ab","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.959610Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:97fba07870ac1cbfe5ac35c4e263efaac0bb12d2af83b6116744122579f25450","observation_id":"7b575b6c-f55f-4b33-9f9e-431bff6775c5","resolution":{"observed_at":"2026-08-05T11:11:42.061190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.964776Z","title":"arXiv preprint arXiv:2512.16962","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.964776Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:26b63cffd55fb2ac7c2bcc7ab9801b76d9f789f954fe6211c597bc61893bf45c","observation_id":"578e49be-e9bd-4f82-b0f5-e7f06ca1deec","resolution":{"observed_at":"2026-08-05T11:11:40.964776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.16291","last_updated":"2023-10-19T16:27:03Z","snapshot_observed_at":"2026-08-13T16:55:46.498156Z","submitted_at":"2023-05-25T17:46:38Z","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.16291","snapshot_observed_at":"2026-08-05T11:11:40.970057Z","title":"arXiv preprint arXiv:2305.16291","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.970057Z"},"links":{"cited_paper":"/paper/2305.16291","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:45d2059d3c003b1beeba3cc431f0f3269b0a7bdd568f3a473e315ecc7804e094","observation_id":"28778efe-44d3-4554-828f-6148c8da33b0","resolution":{"observed_at":"2026-08-05T11:11:40.970057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.035864Z","title":"In International Conference on Learning Representations, volume 2024, pages 32593–32627","venue":null,"work_id":"61a8b81e-7ed3-48e2-9aa6-67b49668c58e","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.974910Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:9c6db84f5d05803206339bcb1c2b3fa464a160f7bf8113d1275e296b88c33d7f","observation_id":"dc9973b4-a778-4544-b1ca-7774b7333816","resolution":{"observed_at":"2026-08-05T11:11:42.041112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:40.979534Z","title":"arXiv preprint arXiv:2510.02373","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.979534Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:910b008d3b4f39d55e1446975584d0fd0028d71b11a85bc2f94a0d0ac53828aa","observation_id":"97efe2d9-462b-49ee-b3f1-fe9b5b2aa18a","resolution":{"observed_at":"2026-08-05T11:11:40.979534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:42.018022Z","title":"In Findings of the Association for Computational Linguistics: ACL 2024, pages 3053–3077","venue":null,"work_id":"bf2e3c7c-b85a-41c9-919d-5f226f84c341","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.983698Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:53867cf8da8ebf79d3b5a24abee0ebe2a411295dfc9a4d86467f9b51078102e6","observation_id":"21592f37-54c4-4ade-9893-4fd76f3a8811","resolution":{"observed_at":"2026-08-05T11:11:42.022862Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.999980Z","title":"In International Conference on Learning Representations, volume 2024, pages 19036–19066","venue":null,"work_id":"8f2b680f-9182-468d-95fd-473f4f350c64","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.988621Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:df466d952d04b3856873cc519ed75774a53d9d2a69e5d994f0005f693f25ede1","observation_id":"d282220b-6a0b-425e-bd83-569623ba813f","resolution":{"observed_at":"2026-08-05T11:11:42.006483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.15841","last_updated":"2025-07-17T08:53:48Z","snapshot_observed_at":"2026-08-13T07:45:46.918603Z","submitted_at":"2025-06-18T19:44:46Z","title":"MEM1: Learning to Synergize Memory and Reasoning for Efficient Long-Horizon Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.15841","snapshot_observed_at":"2026-08-05T11:11:40.993520Z","title":"(→ Tin this DB)","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.993520Z"},"links":{"cited_paper":"/paper/2506.15841","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:1d737cb67f7d696b50351b2159db942c5cd2a9c336d8429f0469d03b64833f70","observation_id":"bc638171-856c-40cf-8aa5-ed5e8c3e7205","resolution":{"observed_at":"2026-08-05T11:11:40.993520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2291.1171","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.203282Z","title":"The HF Hub (DataInterpreter) row group targets HuggingFace model-identifier redirects in the agent’s from_pretrained call; individual pair definitions appear in Appendix F","venue":null,"work_id":"653c11ff-491d-4773-9323-527f4842cd09","year":1973},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.014368Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:f23b57d422e19bb50321b4707283f0d4ac704448d4da9d6c91e16f804b01493f","observation_id":"0d9d5a20-c134-41c9-a58c-ceb931ac53ca","resolution":{"observed_at":"2026-08-05T11:11:41.216772Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.963572Z","title":null,"venue":null,"work_id":"ee55e9a2-0063-49c1-8541-511442a30298","year":2026},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:41.019247Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:5c576df6b0de6d8ea80f792e3042a17c9e7c0a467256139ff8068dfa8c437755","observation_id":"3822f83c-b525-46db-ab69-4e7a15b9a97d","resolution":{"observed_at":"2026-08-05T11:11:41.969466Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.07732","last_updated":"2021-08-16T03:57:30Z","snapshot_observed_at":"2026-08-15T17:40:38.050939Z","submitted_at":"2021-08-16T03:57:30Z","title":"Program Synthesis with Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.07732","snapshot_observed_at":"2026-08-05T11:11:40.893326Z","title":"arXiv preprint arXiv:2108.07732","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.893326Z"},"links":{"cited_paper":"/paper/2108.07732","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:cce92fafc6286c32a35682195c900e18c9f76e1bc51c6c8d97e81f8dd95942a3","observation_id":"58b1adde-2b64-4a1b-82ca-451b6286fbc3","resolution":{"observed_at":"2026-08-05T11:11:40.893326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:11:41.983387Z","title":"out of stock","venue":null,"work_id":"3034df86-3abc-4351-ba86-2e63dd2c1c38","year":2024},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.998938Z"},"links":{"citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:879b45cf65361329118d688c6069d32ab46dc79374c06014fe501a058351a28d","observation_id":"a6aa3b3f-9640-4083-a2df-50b87aaba820","resolution":{"observed_at":"2026-08-05T11:11:41.988261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-05T11:11:40.909397Z","title":"arXiv preprint arXiv:2312.10997, 2(1):32","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.909397Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:17af89434b88fa965f1402b3608cf72c7854c1be6fa3591050bee4a21ff6fc14","observation_id":"38978088-8e05-4ea8-b505-c6a0df712d79","resolution":{"observed_at":"2026-08-05T11:11:40.909397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.03610","last_updated":"2024-02-06T00:53:27Z","snapshot_observed_at":"2026-08-14T18:34:51.905761Z","submitted_at":"2024-02-06T00:53:27Z","title":"RAP: Retrieval-Augmented Planning with Contextual Memory for Multimodal LLM Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.03610","snapshot_observed_at":"2026-08-05T11:11:40.930421Z","title":"arXiv preprint arXiv:2402.03610","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.930421Z"},"links":{"cited_paper":"/paper/2402.03610","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:59dc07990e5c450b424269b2cdbbc15aef3c4bb2979f7837708a0811dc14394f","observation_id":"a8a49a66-ed81-4302-aab3-906d9caea3e7","resolution":{"observed_at":"2026-08-05T11:11:40.930421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2504.19413","last_updated":"2025-04-28T01:46:35Z","snapshot_observed_at":"2026-08-14T23:23:31.683130Z","submitted_at":"2025-04-28T01:46:35Z","title":"Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.19413","snapshot_observed_at":"2026-08-05T11:11:40.904047Z","title":"arXiv preprint arXiv:2504.19413","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.904047Z"},"links":{"cited_paper":"/paper/2504.19413","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:aa21fcf4f83d93ae6717f0069cd2a9f72029f97da01a65bfcf88e074dcbbc367","observation_id":"bc1df7c6-0c19-454d-b6f0-3c39fbc4c786","resolution":{"observed_at":"2026-08-05T11:11:40.904047Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2604.14228","last_updated":"2026-07-02T17:12:13Z","snapshot_observed_at":"2026-08-15T10:24:01.825835Z","submitted_at":"2026-04-14T17:59:37Z","title":"Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.14228","snapshot_observed_at":"2026-08-05T11:11:40.935774Z","title":"Yue Liu, Hongcheng Gao, Shengfang Zhai, Yufei He, Jun Xia, Zhengyu Hu, Yulin Chen, Xihong Yang, Jiaheng Zhang, Stan Z Li, and 1 others","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-05T11:11:40.935774Z"},"links":{"cited_paper":"/paper/2604.14228","citing_paper":"/paper/2608.03844"},"observation_digest":"sha256:b72741babad24a53f11fc41dec54f26e6303a2a1806e2860c0509d98214c10c6","observation_id":"252e3da5-5bdb-4bae-9db2-6228be2a13d7","resolution":{"observed_at":"2026-08-05T11:11:40.935774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.03844","last_updated":"2026-08-04T15:50:26Z","latest_version":1,"primary_category":"cs.AI","snapshot_observed_at":"2026-08-12T21:23:51.346417Z","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":3,"verified_fuzzy":6},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2608.03844."}