{"as_of":"2026-08-11T15:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f5de083f466534a90a78bf5a794a552a4a1e77fe4c95c24675b10fda29966a88","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:56:02.868695Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.09828/citation-record","integrity":"/paper/2608.09828/integrity","json":"/paper/2608.09828/citation-record.json","paper":"/paper/2608.09828"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.297423Z","title":null,"venue":null,"work_id":"a687ab15-1af8-4c42-ba0a-2c5e8787cd94","year":1990},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.782067Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:5ac1c0497d7bd8b05ac771b1117b58d430cb1897a7e063a45cb0bba7222905f9","observation_id":"6da49454-9acd-4bd0-99ac-6df259864ad0","resolution":{"observed_at":"2026-08-11T05:56:03.300914Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.287306Z","title":null,"venue":null,"work_id":"e5b5684f-cc94-4f58-8a38-6b682316595a","year":1990},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.787912Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:9a047b2efd5f54be29cba610a9ec1e7658c681dda108d1aa9d9c20eebd5965cf","observation_id":"0316ac36-b786-4fb1-8865-ffb46ec67915","resolution":{"observed_at":"2026-08-11T05:56:03.290911Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.276480Z","title":null,"venue":null,"work_id":"4eb1bcbb-dc6b-4101-8025-ebe3c54b49a9","year":1995},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.791840Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:ef3171f73dd52fec375ea7f6ae4b66d42703925cd1d711a2227386637c86e96a","observation_id":"f1edf96b-34bb-4976-b671-2c845bd04637","resolution":{"observed_at":"2026-08-11T05:56:03.280322Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.795511Z","title":null,"venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.795511Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:0da89636f1d6674c5c49332db4d99750cfb89c9766cb6ce2e3a037b3c9496d92","observation_id":"e60da237-f9f9-4b6b-96b2-aff2d395a5f8","resolution":{"observed_at":"2026-08-11T05:56:02.795511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.artint.2012.03.004","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.894241Z","title":"Rodriguez-Aguilar, and Carles Sierra","venue":null,"work_id":"e6cf7fbb-993a-42f1-8a50-3ae8ebf8c8c3","year":2012},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.799114Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:7d9c1b435f45f7e63a290a1529e81192a52ff1f0742ba788190c0b895be66d10","observation_id":"5071e760-b90a-4e09-8ffc-61fadd8fa9c4","resolution":{"observed_at":"2026-08-11T05:56:02.900068Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.08073","last_updated":"2022-12-15T06:19:23Z","snapshot_observed_at":"2026-08-02T04:53:58.766070Z","submitted_at":"2022-12-15T06:19:23Z","title":"Constitutional AI: Harmlessness from AI Feedback","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.08073","snapshot_observed_at":"2026-08-11T05:56:02.802774Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.802774Z"},"links":{"cited_paper":"/paper/2212.08073","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:44ad80c5ebd47c831ed13a2212e05da4257344e8e176497619bd9f37717cff8f","observation_id":"22206f1f-1ffa-4351-8462-e80ba66f34e4","resolution":{"observed_at":"2026-08-11T05:56:02.802774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.16339","last_updated":"2025-01-08T20:11:59Z","snapshot_observed_at":"2026-08-11T10:38:35.302365Z","submitted_at":"2024-12-20T21:00:11Z","title":"Deliberative Alignment: Reasoning Enables Safer Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.16339","snapshot_observed_at":"2026-08-11T05:56:02.806840Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.806840Z"},"links":{"cited_paper":"/paper/2412.16339","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:a23d4379e25be8fc9c68bb94abcfacb520e10b93ca6892f2a16fdad9cd17f3c5","observation_id":"00dab705-8343-464f-8739-3326954e501b","resolution":{"observed_at":"2026-08-11T05:56:02.806840Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.18813","last_updated":"2025-06-24T08:05:33Z","snapshot_observed_at":"2026-08-07T19:59:01.081751Z","submitted_at":"2025-03-24T15:54:10Z","title":"Defeating Prompt Injections by Design","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.18813","snapshot_observed_at":"2026-08-11T05:56:02.810420Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.810420Z"},"links":{"cited_paper":"/paper/2503.18813","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:13bfc23869a6c00ce3fa4a471d35bad506e2552ea1e2d896ee5ab6212ea10e28","observation_id":"2d30ddbf-f8cd-48b9-8a35-85ba74f78460","resolution":{"observed_at":"2026-08-11T05:56:02.810420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.813937Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.813937Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:46a1009543fb4a2cafd2e509615d1ee11f75760d64324a07744ad077df16fb80","observation_id":"a797cea3-e608-4f53-b795-0a6540fca3d1","resolution":{"observed_at":"2026-08-11T05:56:02.813937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.26542","last_updated":"2026-07-01T06:30:43Z","snapshot_observed_at":"2026-08-09T16:36:11.288977Z","submitted_at":"2026-05-26T04:44:59Z","title":"ChainCaps: Composition-Safe Tool-Using Agents via Monotonic Capability Attenuation","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.26542","snapshot_observed_at":"2026-08-11T05:56:02.817318Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.817318Z"},"links":{"cited_paper":"/paper/2605.26542","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:f7e47f06f9493b5267f4fc35ea4b8afeac8ece2c95a2c834c82721e2fa9705f5","observation_id":"c90ce8fa-8753-4989-aef4-0d9a43da82f9","resolution":{"observed_at":"2026-08-11T05:56:02.817318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.01236","last_updated":"2026-08-10T14:38:04Z","snapshot_observed_at":"2026-08-11T14:18:46.708625Z","submitted_at":"2026-05-01T03:16:35Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","version":2},"cited_work":{"arxiv_id":"2607.01236","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.01236","snapshot_observed_at":"2026-08-11T05:56:03.148688Z","title":"Safeguarding LLM Agents from Misalignment through Provenance Analysis","venue":"cs.CL","work_id":"c86bf17d-9310-496e-8e4d-a9fe8eb0a684","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.820930Z"},"links":{"cited_paper":"/paper/2607.01236","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:d534f3e94f724336661341cc2e58114587f88e0cc552f07bc2b92440a26e84b8","observation_id":"7febcf1d-4c64-488c-8e2a-f3fa627f2daa","resolution":{"observed_at":"2026-08-11T05:56:03.152983Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.19328","last_updated":"2024-05-29T17:57:30Z","snapshot_observed_at":"2026-07-06T18:22:10.094519Z","submitted_at":"2024-05-29T17:57:30Z","title":"Normative Modules: A Generative Agent Architecture for Learning Norms that Supports Multi-Agent Cooperation","version":1},"cited_work":{"arxiv_id":"2405.19328","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.19328","snapshot_observed_at":"2026-08-11T05:56:03.135082Z","title":"Normative Modules: A Generative Agent Architecture for Learning Norms that Supports Multi-Agent Cooperation","venue":"cs.MA","work_id":"c7b08d1e-1bd4-49fa-8a62-41109b9ccb5a","year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.824530Z"},"links":{"cited_paper":"/paper/2405.19328","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:bb7d1552aafca70f249c5a2e8f09ca124d6dc7e7a874d67b408ecc940dd5997a","observation_id":"c51de420-58fd-4c78-8297-4e37efe17e4c","resolution":{"observed_at":"2026-08-11T05:56:03.139163Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.828149Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.828149Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:5c8d845c2bc5a84c6ef2da0b213ec6c20dbdb84dfc40073173f077fbd48d8d0e","observation_id":"550ae035-be3b-4270-934f-2e8d8cc2dee1","resolution":{"observed_at":"2026-08-11T05:56:02.828149Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2012.08630","last_updated":"2020-12-15T21:39:50Z","snapshot_observed_at":"2026-08-09T08:09:12.994031Z","submitted_at":"2020-12-15T21:39:50Z","title":"Open Problems in Cooperative AI","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.08630","snapshot_observed_at":"2026-08-11T05:56:02.831415Z","title":"McKee, Joel Z","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.831415Z"},"links":{"cited_paper":"/paper/2012.08630","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:9846403279511180a46aa99ccfe025451dbd4d61a822717f5ea58e525b8d87ab","observation_id":"cffe1265-4564-4e66-9ccd-1759de66c0bb","resolution":{"observed_at":"2026-08-11T05:56:02.831415Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.08426","last_updated":"2026-06-02T11:37:31Z","snapshot_observed_at":"2026-07-06T23:20:38.385189Z","submitted_at":"2026-05-08T19:37:07Z","title":"Mechanism Design Is Not Enough: Prosocial Agents for Cooperative AI","version":2},"cited_work":{"arxiv_id":"2605.08426","doi":null,"metadata_source":"pith","pith_arxiv_id":"2605.08426","snapshot_observed_at":"2026-08-11T05:56:03.032429Z","title":"Mechanism Design Is Not Enough: Prosocial Agents for Cooperative AI","venue":"cs.GT","work_id":"5a006590-2b51-4a46-9e36-58614ca10f74","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.835045Z"},"links":{"cited_paper":"/paper/2605.08426","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:239d4e74f2477fc724d9430b7af49139ad3ec903761566d8485e4b54614c83de","observation_id":"a5a0e934-a8eb-48a1-81bf-02bb45895d98","resolution":{"observed_at":"2026-08-11T05:56:03.036676Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13352","last_updated":"2024-11-24T22:04:23Z","snapshot_observed_at":"2026-07-06T18:33:32.806635Z","submitted_at":"2024-06-19T08:55:56Z","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.13352","snapshot_observed_at":"2026-08-11T05:56:02.838662Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.838662Z"},"links":{"cited_paper":"/paper/2406.13352","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:c25e0277dee61b558372b3a505a1fc56de1075006399069662358a07a62761da","observation_id":"d5152a60-8481-47c3-ba8a-fe23512f6f52","resolution":{"observed_at":"2026-08-11T05:56:02.838662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.14470","last_updated":"2025-05-20T05:58:23Z","snapshot_observed_at":"2026-08-06T12:35:19.109481Z","submitted_at":"2024-12-19T02:35:15Z","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.14470","snapshot_observed_at":"2026-08-11T05:56:02.842418Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.842418Z"},"links":{"cited_paper":"/paper/2412.14470","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:0659b8a3acb4b79464caa87ae989310b5632e41313af34d0d92ad2589c6d54d2","observation_id":"5aa9538d-40ee-4634-8c7a-6386433d01e5","resolution":{"observed_at":"2026-08-11T05:56:02.842418Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.24625","last_updated":"2026-07-27T16:19:45Z","snapshot_observed_at":"2026-08-04T21:51:33.280706Z","submitted_at":"2026-07-27T16:19:45Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","version":1},"cited_work":{"arxiv_id":"2607.24625","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.24625","snapshot_observed_at":"2026-08-11T05:56:03.000496Z","title":"Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents","venue":"cs.CR","work_id":"751daa42-cd5b-4b9d-a0da-9a9dde8348bf","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.846369Z"},"links":{"cited_paper":"/paper/2607.24625","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:d139e2b59449cb985e3500d2ce1545062a15935b69f58b537f8c11762ff79e31","observation_id":"d2cbe207-0591-4469-8827-3455c6f9ad2d","resolution":{"observed_at":"2026-08-11T05:56:03.004575Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2605.10481","last_updated":"2026-05-11T12:43:19Z","snapshot_observed_at":"2026-08-11T01:49:44.988527Z","submitted_at":"2026-05-11T12:43:19Z","title":"Safe Multi-Agent Behavior Must Be Maintained, Not Merely Asserted: Constraint Drift in LLM-Based Multi-Agent Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.10481","snapshot_observed_at":"2026-08-11T05:56:02.850392Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.850392Z"},"links":{"cited_paper":"/paper/2605.10481","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:a5ffc1bfea98fc6d2778b5151de406afd1dd22d5213ee85c3c1831dd469718cf","observation_id":"13d3b173-ac75-4c3e-b57a-be852552c0ba","resolution":{"observed_at":"2026-08-11T05:56:02.850392Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2605.05440","last_updated":"2026-05-06T20:56:17Z","snapshot_observed_at":"2026-08-05T13:57:19.964395Z","submitted_at":"2026-05-06T20:56:17Z","title":"Authorization Propagation in Multi-Agent AI Systems: Identity Governance as Infrastructure","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2605.05440","snapshot_observed_at":"2026-08-11T05:56:02.854401Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.854401Z"},"links":{"cited_paper":"/paper/2605.05440","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:8dcf4c9adbca206facdea27eb6ad4915d9bb558d69ba203a2e5f6f3fc07be143","observation_id":"7507c7da-59bb-42ba-a3e6-8154a8af596e","resolution":{"observed_at":"2026-08-11T05:56:02.854401Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2607.07695","last_updated":"2026-07-08T17:53:56Z","snapshot_observed_at":"2026-07-11T23:20:20.966286Z","submitted_at":"2026-07-08T17:53:56Z","title":"Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety","version":1},"cited_work":{"arxiv_id":"2607.07695","doi":null,"metadata_source":"pith","pith_arxiv_id":"2607.07695","snapshot_observed_at":"2026-08-11T05:56:02.967811Z","title":"Institutional Red-Teaming: Deployment Rules, Not Just Models, Causally Shape Multi-Agent AI Safety","venue":"cs.AI","work_id":"04d49e72-de99-4868-9457-ffbe5ec24c6c","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.858113Z"},"links":{"cited_paper":"/paper/2607.07695","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:66437edd1293f90f203dfc8afbab56f4bf5082fc120e2b511e1a0bf9751ae3f3","observation_id":"419dd9b1-738f-4393-9187-40a6adad193e","resolution":{"observed_at":"2026-08-11T05:56:02.972675Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2607.07097","last_updated":"2026-07-08T07:31:37Z","snapshot_observed_at":"2026-08-09T06:04:04.401991Z","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2607.07097","snapshot_observed_at":"2026-08-11T05:56:02.861975Z","title":null,"venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.861975Z"},"links":{"cited_paper":"/paper/2607.07097","citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:c5ff144d11dda4403268e8a7a38b57444cf9cd03c6e6201ee204ec4fd05a0f75","observation_id":"6282a09f-b320-462b-8a01-246956c331c3","resolution":{"observed_at":"2026-08-11T05:56:02.861975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:02.865464Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.865464Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:25a928b87b8a1de49018bbf49f039ce9f0b4b785db53052de6da505d1f547fec","observation_id":"2a4b6a8f-4e41-459a-938e-36fce6c9a768","resolution":{"observed_at":"2026-08-11T05:56:02.865464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:56:03.266654Z","title":null,"venue":null,"work_id":"91f6bf34-4e34-4947-b900-647d535247c2","year":2026},"citing_paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-11T05:56:02.868695Z"},"links":{"citing_paper":"/paper/2608.09828"},"observation_digest":"sha256:a7e292e9173c722fd40ad374bbe513cc353cd63b6e9af16a0394e3d0e7fb7644","observation_id":"2d80d210-93ee-4522-93e6-24218230b672","resolution":{"observed_at":"2026-08-11T05:56:03.270036Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.09828","last_updated":"2026-08-10T16:47:01Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-11T14:19:38.163293Z","submitted_at":"2026-08-10T16:47:01Z","title":"Multi-Agent AI Safety as an Institutional Design Problem"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":18,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2608.09828."}