Paper Citation Record · LEDGER

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation

As of 17 August 2026, this Paper Citation Record lists 14 of 14 outbound references and 1 inbound Pith citation observation for arXiv:2606.16821.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.16821 v2

Coverage vector

measured 14 of 14 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-27T04:05:04.871506Z

measured 15 of 15 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T15:32:45.613431Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-15T15:32:46.489371Z

Reference resolution

14 of 14 outbound references displayed

verified exact0
verified fuzzy0
unresolved13
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ab52f143-877e-4d99-8b01-e0fa4fa9cae0 · outbound

This paper cites https: //huggingface.co/BAAI/bge-small- en-v1.5.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation https: //huggingface.co/BAAI/bge-small- en-v1.5

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0309018a-e146-454f-8dfb-da9cd8406c45 · outbound

This paper cites InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec), pages 79–90.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation InProceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec), pages 79–90

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 91cdea49-62e3-4f2c-952e-438ebc027b8e · outbound

This paper cites arXiv preprint.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation arXiv preprint

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cb61aca4-b6ca-422c-b661-69f8e3dfda1a · outbound

This paper cites alongside other op- tions.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation alongside other op- tions

Reference 4

Resolution: malformed identifier; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 95866b0c-befe-4cbd-a56b-e395a500c5d8 · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 5

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e36e8d51-9fc9-4934-aa0b-479f2d4a82e9 · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 45517157-3cbe-48ed-86e2-f9984271322d · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44bd56e7-881c-4852-a918-4dc086b0c7ba · outbound

This paper cites shift_score.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation shift_score

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d45ee7d6-3f06-45ee-bf8d-d1a08dc1c892 · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01512968-e8ee-479f-9a53-b2fd053e0443 · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8feee606-7b8a-4fcb-bf03-19438b8aac19 · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d802720f-de5b-4994-a463-add959b7281f · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 84d333df-6a46-4fd3-a87c-991862d35e19 · outbound

This paper cites an unresolved cited work.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9ebae84a-a063-49a6-8da5-d97b8fef3465 · outbound

This paper cites stealth_score.

How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation stealth_score

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-27T04:05:04.871506Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation 776e12dc-fde0-428d-a8c3-c40ac4bd2839 · inbound

SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders cites this paper.

SIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG Recommenders How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation

Reference 3

Resolution: verified exact; local_arxiv, observed 2026-08-15T15:32:46.493324Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.