Paper Citation Record · LEDGER

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents

As of 9 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 0 inbound Pith citation observations for arXiv:2607.29190.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.29190 v1

Coverage vector

measured 50 of 50 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-03T12:01:17.306903Z

measured 50 of 50 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

50 of 50 outbound references displayed

verified exact0
verified fuzzy0
unresolved48
parse uncertain2
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation a879eed0-7ff8-4f66-91d0-fc7ce5195806 · outbound

This paper cites Dive into.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Dive into

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:11.495309Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1e09c8f9-91da-45e1-aa5c-462a092207b6 · outbound

This paper cites Measuring the Permission Gate: A Stress-Test Evaluation of.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Measuring the Permission Gate: A Stress-Test Evaluation of

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:11.649474Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ae9fb981-812c-49a5-ad71-06904735362e · outbound

This paper cites Proceedings of the 36th International Conference on Machine Learning (ICML 2019) , series =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Proceedings of the 36th International Conference on Machine Learning (ICML 2019) , series =

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:11.722773Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 180e0e3d-19a4-4f75-8bab-f393abd56dcd · outbound

This paper cites Advances in Neural Information Processing Systems 38 (NeurIPS 2025) , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Advances in Neural Information Processing Systems 38 (NeurIPS 2025) , year =

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:11.833433Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3a8c4613-99bb-49e3-b5a3-72e67f7689fd · outbound

This paper cites Not What You've Signed Up For: Compromising Real-World.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Not What You've Signed Up For: Compromising Real-World

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:11.896597Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e829f148-d331-435a-b3c5-202b900da40c · outbound

This paper cites 2024 , eprint =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2024 , eprint =

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.016492Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 742e4277-9a71-49de-9c24-87fa0d59f084 · outbound

This paper cites AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.135104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5cfba60f-b8a1-4111-bd46-c4376095193d · outbound

This paper cites 2023 , eprint =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2023 , eprint =

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.203992Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5cd3f176-f1d1-48de-b469-ddb81134f15a · outbound

This paper cites 2025 , eprint =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2025 , eprint =

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.287013Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3cc7e371-1487-4b7f-9ab1-d1f439893c4b · outbound

This paper cites Defending Against Indirect Prompt Injection Attacks With Spotlighting.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Defending Against Indirect Prompt Injection Attacks With Spotlighting

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.373192Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 46295cca-355c-4848-b804-38940f465338 · outbound

This paper cites 2025 , pages =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2025 , pages =

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.477242Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0eed6f56-8045-45a0-9112-07393b4b84eb · outbound

This paper cites The Instruction Hierarchy: Training.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents The Instruction Hierarchy: Training

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.671208Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9fc54a5c-9b7c-435c-b5f5-34d41ac8ac23 · outbound

This paper cites Defeating Prompt Injections by Design.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Defeating Prompt Injections by Design

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:12.843494Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 407c9188-46f3-4179-8712-feac1de5de95 · outbound

This paper cites and Hashimoto, Tatsunori , booktitle =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents and Hashimoto, Tatsunori , booktitle =

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:13.001497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9041f01b-0c75-4434-8990-4b569b378192 · outbound

This paper cites 2024 , howpublished =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2024 , howpublished =

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:13.160676Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7bc600cf-6912-4448-b7f8-232140c568e0 · outbound

This paper cites MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:13.263106Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b639c964-1916-40ba-931f-4e07f1acf3bf · outbound

This paper cites Quantitative Certification of Agentic Tool Selection.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Quantitative Certification of Agentic Tool Selection

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:13.395253Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9475ffa-4157-4706-97d3-b8047e5750b8 · outbound

This paper cites 2024 , howpublished =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2024 , howpublished =

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:13.519049Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd52b9b7-b135-42da-9a0b-ca6ff756904c · outbound

This paper cites an unresolved cited work.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Unresolved cited work

Reference 19

Resolution: parse uncertain; no resolver link, observed 2026-08-03T12:01:13.732418Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eb8f1b31-2031-4631-9cb0-51ff716b44a3 · outbound

This paper cites 2018 , howpublished =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2018 , howpublished =

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:13.967406Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7b7a837d-b6db-47ac-a2f1-38f05bc0787f · outbound

This paper cites 2024 , howpublished =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2024 , howpublished =

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:14.138241Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9c7754e4-086e-46bf-a725-35331b3ad7ab · outbound

This paper cites 2024 , howpublished =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2024 , howpublished =

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:14.249636Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e80bdf07-ecdc-40a1-a414-c961d05d4e9c · outbound

This paper cites , title =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents , title =

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:14.386233Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d5d109af-82d5-4cd9-a237-0ddcc0d0e592 · outbound

This paper cites and Sun, Jun , title =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents and Sun, Jun , title =

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:14.553878Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 084b4ba0-9031-42b0-81d9-5a74010acf36 · outbound

This paper cites Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:14.750400Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8c5ba55c-ce98-48bc-8877-1d782033837c · outbound

This paper cites SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents SAFEFLOW: A Principled Protocol for Trustworthy and Transactional Autonomous Agent Systems

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:14.921424Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d2e2bf3e-2ef9-4a62-ae4f-f17b8d8a4cde · outbound

This paper cites Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.088393Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d046662a-b5eb-41b3-b5b3-5fbc9bcd455c · outbound

This paper cites arXiv preprint arXiv:2602.09757 , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents arXiv preprint arXiv:2602.09757 , year =

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.263615Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 31852ad1-6cef-4ad8-a649-1d2fbc89d960 · outbound

This paper cites arXiv preprint arXiv:2603.19469 , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents arXiv preprint arXiv:2603.19469 , year =

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.363943Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2586ff5a-9ec1-4b1d-a697-ff3d8c072de6 · outbound

This paper cites A Coin Flip for Safety:.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents A Coin Flip for Safety:

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.458319Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2062fd90-c5ed-46d1-b517-a54283f7fa02 · outbound

This paper cites 14th IEEE International Conference on Machine Learning and Applications (ICMLA) , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 14th IEEE International Conference on Machine Learning and Applications (ICMLA) , year =

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.536071Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a30fff0-8fe2-46f7-a47f-4ca89bc6db1c · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.652239Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fafff261-19a9-4d2b-898d-5f8b0fd93744 · outbound

This paper cites Advances in Neural Information Processing Systems (NeurIPS) , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Advances in Neural Information Processing Systems (NeurIPS) , year =

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.747071Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 63870aee-f3f1-40fd-8e00-a924577593ab · outbound

This paper cites Proceedings of the 36th International Conference on Machine Learning (ICML) , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Proceedings of the 36th International Conference on Machine Learning (ICML) , year =

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.812709Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 108a6146-8e61-45fa-87d1-ffeef63f6054 · outbound

This paper cites Zico , title =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Zico , title =

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:15.893626Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1d35431b-1534-4da6-af01-107fb23b3d44 · outbound

This paper cites an unresolved cited work.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Unresolved cited work

Reference 36

Resolution: parse uncertain; no resolver link, observed 2026-08-03T12:01:15.960645Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 591b822e-dde8-4a77-831d-6c27a5db7cef · outbound

This paper cites Advances in Neural Information Processing Systems 31 (NeurIPS) , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Advances in Neural Information Processing Systems 31 (NeurIPS) , year =

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.063689Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ea79958-5ed0-4f2f-9993-cc958a8c3edf · outbound

This paper cites International Conference on Learning Representations (ICLR) , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents International Conference on Learning Representations (ICLR) , year =

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.167596Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 393b27b0-433a-488d-aeee-2e63eecddd83 · outbound

This paper cites an unresolved cited work.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Unresolved cited work

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.255277Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7a217ec-65c6-4cf5-99b0-fb38ec475edc · outbound

This paper cites Proceedings of the 42nd International Conference on Machine Learning (ICML 2025), PMLR 267 , year =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Proceedings of the 42nd International Conference on Machine Learning (ICML 2025), PMLR 267 , year =

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.343024Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98766511-251a-40cd-9989-6652c1276ad2 · outbound

This paper cites and Tschantz, Michael Carl , title =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents and Tschantz, Michael Carl , title =

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.416366Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9bd0b705-ffea-4bdf-b2fa-8e450872ee33 · outbound

This paper cites Safe Reinforcement Learning via Shielding , booktitle =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Safe Reinforcement Learning via Shielding , booktitle =

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.521872Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 25a17bf4-7184-4e8f-ad01-89edfaed55a1 · outbound

This paper cites an unresolved cited work.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Unresolved cited work

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.647564Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3a912178-1208-42dc-b9d9-c238556c2f15 · outbound

This paper cites 2024 , howpublished =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents 2024 , howpublished =

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.715118Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dca02ebc-1222-42f4-b165-ce0cafaf7fd0 · outbound

This paper cites an unresolved cited work.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Unresolved cited work

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.807944Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ab1ce1b8-8f35-46db-8db2-c5b9d01d7d58 · outbound

This paper cites Certified Robustness to Adversarial Word Substitutions , booktitle =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Certified Robustness to Adversarial Word Substitutions , booktitle =

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.864777Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6dc4c99a-2b15-43eb-b951-2c419add2c3d · outbound

This paper cites an unresolved cited work.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Unresolved cited work

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:16.941409Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4e3283c8-3f6f-4ad4-8ac6-5b5ac5c6d28b · outbound

This paper cites , title =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents , title =

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:17.040258Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 74200796-5c9f-4194-b1be-5272fc980b11 · outbound

This paper cites Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More , booktitle =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More , booktitle =

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:17.161763Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4ed6622b-54f0-4091-bb31-e5b591e33230 · outbound

This paper cites and Ferraiolo, David and Kuhn, Rick and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen , title =.

CAGE: Certified Authorization under Typed-Return Uncertainty for Tool-Using Agents and Ferraiolo, David and Kuhn, Rick and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen , title =

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-03T12:01:17.306903Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.