Paper Citation Record · LEDGER

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection

As of 10 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 1 inbound Pith citation observation for arXiv:2605.23723.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.23723 v1

Coverage vector

measured 29 of 29 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-25T04:05:15.708438Z

measured 30 of 30 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-01T06:18:03.971096Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

29 of 29 outbound references displayed

verified exact7
verified fuzzy14
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch8

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 5a20e35b-3a95-4224-8fd8-1eb9a9675164 · outbound

This paper cites Advances in neural information processing systems , volume=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Advances in neural information processing systems , volume=

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.013618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 2bc0c479-b80f-4b39-94f9-659b6916f14b · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Advances in Neural Information Processing Systems , volume=

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.018330Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 89d206a1-dadd-486d-9228-1f4fac26c093 · outbound

This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts

Reference 3

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.376119Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 57fc87b4-0dd9-4ad9-9802-663efaea0391 · outbound

This paper cites Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Reference 4

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.364155Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 0dbdee8e-8a07-4592-965b-db7751af86f0 · outbound

This paper cites GPT-4o System Card.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection GPT-4o System Card

Reference 5

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.369667Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 35e166c6-5c61-4131-bfe3-fa8f17a35099 · outbound

This paper cites DeepSeek-V3 Technical Report.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection DeepSeek-V3 Technical Report

Reference 6

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.358591Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 969225e4-2795-46b2-8660-91a074a3d6e8 · outbound

This paper cites OpenHands: An Open Platform for AI Software Developers as Generalist Agents.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection OpenHands: An Open Platform for AI Software Developers as Generalist Agents

Reference 7

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.346047Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation ceaa18a7-caa5-4d28-b1f9-a12528539e2b · outbound

This paper cites Proceedings of the 36th annual acm symposium on user interface software and technology , pages=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Proceedings of the 36th annual acm symposium on user interface software and technology , pages=

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.027194Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 73c0e534-d9af-40b0-8e03-9ffab415f15e · outbound

This paper cites Voyager: An Open-Ended Embodied Agent with Large Language Models.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Voyager: An Open-Ended Embodied Agent with Large Language Models

Reference 9

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.353131Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 4f1fac2e-bac5-4038-bd2e-45b81f232807 · outbound

This paper cites The eleventh international conference on learning representations , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection The eleventh international conference on learning representations , year=

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.032334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation c2a78044-30fa-4f70-9d17-ae7e926f9789 · outbound

This paper cites Advances in neural information processing systems , volume=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Advances in neural information processing systems , volume=

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.040757Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b9cba59d-9c49-4262-91a9-d481a349be32 · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Advances in Neural Information Processing Systems , volume=

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.005061Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 955e165c-acd2-4928-afc4-bfc63c4b40b3 · outbound

This paper cites arXiv e-prints , pages=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection arXiv e-prints , pages=

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.009216Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 07d8002b-3e50-4797-8811-404ea62b1455 · outbound

This paper cites arXiv preprint arXiv:2512.16962 , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection arXiv preprint arXiv:2512.16962 , year=

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.341060Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 9e0ac45e-fec9-4531-9d03-160eee2430dd · outbound

This paper cites arXiv preprint arXiv:2601.07072 , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection arXiv preprint arXiv:2601.07072 , year=

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.381450Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b1b65acc-6957-4870-9850-af22a0172a0b · outbound

This paper cites 34th USENIX Security Symposium (USENIX Security 25) , pages=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection 34th USENIX Security Symposium (USENIX Security 25) , pages=

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.045547Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 0017c67d-b031-4df2-94eb-0074f3e2b8d0 · outbound

This paper cites Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Proceedings of the 16th ACM workshop on artificial intelligence and security , pages=

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.022384Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 34e1bbdb-d6da-4c95-9f66-2024768d7d0e · outbound

This paper cites Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers) , pages=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers) , pages=

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.036626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d74a1925-d0ef-4aed-b636-5f55d00c4d90 · outbound

This paper cites A Survey of Attacks on Large Language Models.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection A Survey of Attacks on Large Language Models

Reference 19

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.417334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation fc89c463-d7fd-4f27-b946-214ddbfcd866 · outbound

This paper cites Jailbreak Attacks and Defenses Against Large Language Models: A Survey.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Jailbreak Attacks and Defenses Against Large Language Models: A Survey

Reference 20

Resolution: metadata mismatch; local_arxiv, observed 2026-05-25T04:05:20.423010Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 3aabfb7d-a5da-4f7f-8287-cb4046796cc5 · outbound

This paper cites do anything now.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection do anything now

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.058986Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation fde27398-675a-4de3-a358-7073ae7f9a9e · outbound

This paper cites Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.411461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 042cce13-2368-418d-bf47-2c2440f80a08 · outbound

This paper cites ICT Express , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection ICT Express , year=

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.063000Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 229c2a93-8b73-4bbf-bbaf-ddfe6119a16f · outbound

This paper cites arXiv preprint arXiv:2509.14285 , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection arXiv preprint arXiv:2509.14285 , year=

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.428612Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation dfe01dab-f694-47c3-8ea2-3f2059e67533 · outbound

This paper cites 2021 , eprint=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection 2021 , eprint=

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.051280Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6ed7d97d-c26a-41f3-80cc-723a0a6c9a2d · outbound

This paper cites Proceedings of the 2018 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long Papers) , pages=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection Proceedings of the 2018 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long Papers) , pages=

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-05-25T04:05:21.055178Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation e3b76f52-b478-4c34-8fec-9d64d3c52765 · outbound

This paper cites arXiv preprint arXiv:2510.02373 , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection arXiv preprint arXiv:2510.02373 , year=

Reference 27

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.398236Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 1e8c6866-21d3-4c92-9596-81f694f0fb30 · outbound

This paper cites URLhttps://arxiv.org/abs/2601.05504 First Author et al.:Preprint submitted to ElsevierPage 20 of 21 Security, Privacy, and Ethical Risks in OpenClaw.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection URLhttps://arxiv.org/abs/2601.05504 First Author et al.:Preprint submitted to ElsevierPage 20 of 21 Security, Privacy, and Ethical Risks in OpenClaw

Reference 28

Resolution: metadata mismatch; arxiv_id, observed 2026-05-25T04:05:20.390934Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 3f2a8182-c621-4655-86b3-b6848f95df33 · outbound

This paper cites arXiv preprint arXiv:2603.02240 , year=.

MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection arXiv preprint arXiv:2603.02240 , year=

Reference 29

Resolution: verified exact; arxiv_id, observed 2026-05-25T04:05:20.404053Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Pith citing papers

Observation 490f60a7-4ec2-47be-b589-7e03b9ee8a11 · inbound

Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings cites this paper.

Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-01T06:18:03.971096Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.