Paper Citation Record · LEDGER

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI

As of 21 August 2026, this Paper Citation Record lists 44 of 44 outbound references and 2 inbound Pith citation observations for arXiv:2606.10173.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.10173 v1

Coverage vector

measured 44 of 44 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-27T15:58:55.870979Z

measured 46 of 46 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T14:17:52.659360Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-12T14:26:29.717450Z

Reference resolution

44 of 44 outbound references displayed

verified exact6
verified fuzzy0
unresolved37
parse uncertain0
malformed identifier0
metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 9407df0c-0b0e-4277-8fab-3b6ad60d02d4 · outbound

This paper cites M.; and Such, J.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI M.; and Such, J

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ac66b53f-3a6b-4e4e-a669-4575e3697e6d · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98d4df8c-72a8-445f-95ce-ca9466dbb350 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1839f2fa-a5e6-4181-88f1-ad4bc973e898 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ac86739-f640-4f08-a297-e483bb737a49 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 638dc28d-d13e-444e-9b53-5a55e3c125dc · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c0e50632-e068-4849-b46b-507b5b8229cf · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8f7ed3b8-c729-4b87-842f-50a87c6b147b · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 864649d8-f169-4e46-989c-6d1de4eefb02 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d206d2b-baae-4ff7-9dec-d8d091b2f4a9 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0302e847-bd11-4ae0-9af0-9b8d20f5388d · outbound

This paper cites Towards verifiably safe tool use for llm agents.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Towards verifiably safe tool use for llm agents

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-07-03T02:17:35.280472Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 58369967-eb83-4fee-b1a1-b13150473f73 · outbound

This paper cites P.; Jung, J.; McDaniel, P.; and Sheth, A.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI P.; Jung, J.; McDaniel, P.; and Sheth, A

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3722ffd7-d9fd-47f5-81f9-fb50667cb527 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 64c50371-ba74-4a98-8b74-35a1f56ca808 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 352a7c0e-4dc1-49ce-87e1-bccb6f962899 · outbound

This paper cites P.; Ha, E.; Egelman, S.; Haney, A.; Chin, E.; and Wagner, D.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI P.; Ha, E.; Egelman, S.; Haney, A.; Chin, E.; and Wagner, D

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a674fe54-9e04-4168-82e5-c421216f0f7b · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ec06246-5229-4fbf-a227-18fe245f322e · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 17

Resolution: verified exact; arxiv_id, observed 2026-07-03T02:17:35.282948Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 1a326b0d-63d4-46e7-b0a2-0c93a6fba882 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 18

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4be3334f-63b0-4dcd-ae63-a5820e409449 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 19

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eaa62471-73d9-4f6f-b1de-2dc72cecb0e8 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 20

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 60cb577d-1345-45ed-8875-bb4f86af215a · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 21

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 795cc0bf-a19e-4623-8b2b-63456a953fe7 · outbound

This paper cites A vision for access control in llm-based agent systems.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI A vision for access control in llm-based agent systems

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-07-03T02:17:35.277415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 733bee26-5b06-4dbe-8317-757fccb24bd8 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 23

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation deeead34-7639-4ddb-a144-3573c5ff4a62 · outbound

This paper cites Android Private Compute Core Architecture.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Android Private Compute Core Architecture

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-07-03T02:17:35.285547Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation ae10da4a-a6f2-479f-8f3d-dfbc16fc71fd · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 25

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d1087a74-0dbe-40ce-a187-0e3ae381a227 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 26

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca7d79d6-d805-4f37-889b-4120275fb098 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b0ed6631-051b-4f81-9794-7db8d47e1076 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7504b3f0-57c0-4a56-9a5f-b68ca47343be · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation de885141-325e-4c40-9089-0af7146ac015 · outbound

This paper cites Text Embeddings Reveal (Almost) As Much As Text.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Text Embeddings Reveal (Almost) As Much As Text

Reference 30

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T02:17:35.274277Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 821743d4-3a92-4cb6-a7ec-4cb92041c2a9 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 31

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 350c0b34-b1f8-4760-8f59-153128469792 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 32

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0f661fa2-d1c1-4998-bf05-7c257405cb75 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 233c8155-7a38-4286-8ae8-ec47ae32a3f4 · outbound

This paper cites A.; and Oeldorf-Hirsch, A.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI A.; and Oeldorf-Hirsch, A

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4abe8e2d-e6f1-48f7-9106-e7e616288407 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2156a181-13ff-4f6d-883e-f511bcd20675 · outbound

This paper cites N.; and Sandvig, C.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI N.; and Sandvig, C

Reference 36

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 31d38d49-abc7-471b-9ac2-c0d5cbb93a10 · outbound

This paper cites D.; Smart, A.; White, R.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI D.; Smart, A.; White, R

Reference 37

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c3a27edc-7f65-4d5f-ad80-bc641ce897eb · outbound

This paper cites J.; and Cowan, C.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI J.; and Cowan, C

Reference 38

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b0658650-97dd-4d24-abcf-aca18c621d61 · outbound

This paper cites L.; and Cranor, L.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI L.; and Cranor, L

Reference 39

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d226ec60-ce09-42ba-947d-7160e69657c6 · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 40

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e1f3d15-589a-465a-a654-1eab37987ec4 · outbound

This paper cites D.; Boyd, D.; Friedler, S.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI D.; Boyd, D.; Friedler, S

Reference 41

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0dce2db2-c34a-4c61-8122-1bb55e5e7bee · outbound

This paper cites Prompt Injection Attack to Tool Selection in LLM Agents.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Prompt Injection Attack to Tool Selection in LLM Agents

Reference 42

Resolution: verified exact; local_arxiv, observed 2026-07-03T02:17:35.271795Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation 5bcb2bcc-d216-42eb-8613-0fad58a6d65c · outbound

This paper cites an unresolved cited work.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unresolved cited work

Reference 43

Resolution: unresolved; no resolver link, observed 2026-06-27T15:58:55.870979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d4519b92-9523-4d4c-a080-f6a6a5bea34b · outbound

This paper cites Unveiling Privacy Risks in LLM Agent Memory.

Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI Unveiling Privacy Risks in LLM Agent Memory

Reference 44

Resolution: verified exact; arxiv_id, observed 2026-07-03T02:17:35.288100Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Pith citing papers

Observation 5651b13c-2d7a-4763-93fb-42846683c1ae · inbound

ComBodied Agents: a New Paradigm of Human-Centric Agentic AI cites this paper.

ComBodied Agents: a New Paradigm of Human-Centric Agentic AI Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI

Reference 50

Resolution: verified exact; local_arxiv, observed 2026-08-12T14:26:29.721537Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.

Observation e2ec342a-ddbf-41cc-9d92-3248b20980e5 · inbound

ComBodied Agents: a New Paradigm of Human-Centric Agentic AI cites this paper.

ComBodied Agents: a New Paradigm of Human-Centric Agentic AI Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-15T14:17:52.659360Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.