Paper Citation Record · LEDGER

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

As of 19 August 2026, this Paper Citation Record lists 18 of 18 outbound references and 3 inbound Pith citation observations for arXiv:2508.03125.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2508.03125 v1

Coverage vector

measured 18 of 18 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T04:46:11.845318Z

measured 21 of 21 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T22:07:42.304265Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-07-10T20:57:34.795349Z

Reference resolution

18 of 18 outbound references displayed

verified exact0
verified fuzzy5
unresolved13
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation c0f86c1d-014a-4142-bffe-ed05bf0efcf8 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 1

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:14.452881Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fe076a48-d3bd-410e-9027-70371b3697be · outbound

This paper cites Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agents.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agents

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-06T04:46:10.472401Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a094781-add8-4a0b-a6e4-8dc7afdff49a · outbound

This paper cites CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS CORBA: Contagious Recursive Blocking Attacks on Multi-Agent Systems Based on Large Language Models

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-06T04:46:10.566080Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 677407c8-c0e7-4811-8d4d-fb769219dee7 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:13.323288Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 74df91b9-18b1-42a9-b6c3-a53e76462dd9 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:14.263127Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 51563ef3-f45c-4dd7-8822-b63a46618124 · outbound

This paper cites Consider:.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Consider:

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T04:46:14.100238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e6e6c720-e9bb-41b6-9983-35e5e43fc005 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 7

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:13.934181Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d0bb996a-8dfb-4cff-9f5d-048756aabe45 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:13.755727Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dd7d138f-30ff-4021-9492-38678be69478 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:13.539913Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dcfa664c-9165-4f07-8b32-75db81201654 · outbound

This paper cites Your response should include:.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Your response should include:

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T04:46:13.195379Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7b2ea7bf-7beb-4424-86ff-165ddb625aed · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 12

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:13.100042Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2495a3da-cca8-4693-945f-9f588b9edfe3 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 13

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:12.879735Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f63d8ec0-542e-4174-bb4d-1dd0e82e51d8 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 14

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:12.697510Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation cb846caa-b24c-4874-83e1-fc79d10ed438 · outbound

This paper cites bypass security checks.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS bypass security checks

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T04:46:12.586451Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fd2fa48f-b422-4d1b-bb18-de44e1ed18ec · outbound

This paper cites create back-door access.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS create back-door access

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T04:46:12.418882Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7f3bb1e1-4f23-41da-b108-b7172c84ea93 · outbound

This paper cites an unresolved cited work.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Unresolved cited work

Reference 17

Resolution: unresolved; raw_fallback, observed 2026-08-06T04:46:12.257934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f9c30f5b-6e33-4ed7-8dbf-84cab6a37e97 · outbound

This paper cites INJECTION.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS INJECTION

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T04:46:12.085177Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fd3d5b42-2e5e-4763-ab2e-2b2addca7818 · outbound

This paper cites Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM.

Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-06T04:46:10.420990Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation ce20d99f-4d1d-475e-b6f8-128d419e93e4 · inbound

GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems cites this paper.

GAMMAF: A Common Framework for Graph-Based Anomaly Monitoring Benchmarking in LLM Multi-Agent Systems Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-11T22:41:15.018458Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5b6114b8-3d60-4d89-9034-5b3a49d97c3f · inbound

When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems cites this paper.

When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

Reference 79

Resolution: metadata mismatch; local_arxiv, observed 2026-07-10T20:57:34.810598Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8909be5d-67d9-4685-99c1-96fccbf5d288 · inbound

Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity cites this paper.

Attacking and Defending Multi-Agent Collaborative Filtering Systems Through Connectivity Attack the Messages, Not the Agents: A Multi-round Adaptive Stealthy Tampering Framework for LLM-MAS

Reference 63

Resolution: unresolved; no resolver link, observed 2026-08-05T22:07:42.304265Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.