Pith. sign in

Paper Citation Record · LEDGER

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents

As of 11 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 1 inbound Pith citation observation for arXiv:2607.24625.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.24625 v1

Coverage vector

measured 55 of 55 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-07-31T10:25:18.320400Z

measured 56 of 56 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-11T06:34:44.6726+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T05:56:02.846369Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-11T05:56:03.000496Z

Reference resolution

55 of 55 outbound references displayed

  • verified exact4
  • verified fuzzy0
  • unresolved48
  • parse uncertain0
  • malformed identifier3
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 736822d7-c69a-44ca-9ea3-805803bb5e7e · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 1

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.536419Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.536419Z digest=sha256:6648846bf17a8dca71f1e67febd79de60c25218328d02641aab242ff70d2b683

Observation d87beb57-7f71-4980-b6e4-789d7f411574 · outbound

This paper cites 2024.Model Context Protocol (MCP) Specification.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2024.Model Context Protocol (MCP) Specification

Reference 2

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.606476Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.606476Z digest=sha256:c6e977f0a741395807b102ca95c3968687f50b55f9da10b972ea4fe072357fe0

Observation 857c00f1-4968-4ca6-844b-88b1788e3d4a · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 3

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.676618Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.676618Z digest=sha256:60d140f0b75f4665fa05b47ab44d0aa809a53100a525ba3b223d2cc87b9ffc79

Observation 2519cf88-6cba-42ae-adde-fd636024b422 · outbound

This paper cites Taylor, Krishnamurthy Dvijotham, and Alexandre Lacoste.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Taylor, Krishnamurthy Dvijotham, and Alexandre Lacoste

Reference 4

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.746548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.746548Z digest=sha256:da4b907e22574a619616a9a7f5740ff095f28a310e77d8945dd8b99c4b4be9ee

Observation 25c40781-4fcc-4f19-a997-3e13f186ce8e · outbound

This paper cites 1967.Lattice Theory(3rd ed.).

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 1967.Lattice Theory(3rd ed.)

Reference 5

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.862930Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.862930Z digest=sha256:36f11fe5d930181c8c68293edde940c9c88953750a32ee64a408234fceaababd

Observation 1e0bfb9d-1b50-4387-ad16-94de1ef3ec59 · outbound

This paper cites Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents

Reference 6

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:14.995480Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:14.995480Z digest=sha256:97d98c8b4b3328d8d0356be7985f6e00c604f2e0cf4df6a8166f1e3e1d2ce1f7

Observation 8e7fb7b4-c599-4a38-809c-161b018c303c · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 7

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.700292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

source=pdf_text observed=2026-07-31T10:25:15.157285Z digest=sha256:ad26325b125c2851437f065935d35ab60d04e8477536a2d4eb9684097a5b03da

Observation 354b14fb-3376-4666-8858-1a4c320b02e1 · outbound

This paper cites Securing AI Agents with Information-Flow Control.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Securing AI Agents with Information-Flow Control

Reference 8

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.305550Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.305550Z digest=sha256:bc9a0d99800e895fbaf182e1b756e222c24c5ae1764e801656b043c90f87ce5c

Observation 66f96a41-42e7-4e6f-9463-f66309621e2a · outbound

This paper cites Defeating Prompt Injections by Design.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Defeating Prompt Injections by Design

Reference 9

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.401606Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.401606Z digest=sha256:e978f7879a551ac71d06185fd4709022f84530c77e138dcb70f6ff0a13d763c9

Observation ed1c6a41-01bc-413f-afda-f1ea1b4c21b3 · outbound

This paper cites AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents

Reference 10

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.498142Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.498142Z digest=sha256:66237a1ae7977e4b4448d4941bc012321a276e3233c94129b78ba07fdad1135b

Observation decf9f36-901e-4d08-b6f0-1fda37fdbdc1 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 11

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.718788Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.718788Z digest=sha256:fb5560064c30f6a9339ea2d732f83aa6dfb563564df18c922844108e1d5ecf9e

Observation 2ef4a230-9c7a-42b9-8f3f-8a24eb29acf8 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 12

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.855376Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.855376Z digest=sha256:d83b73fe65ce23968e305c7c4ad2ef0175ed9b52755db5a081d2dbef06eeb50c

Observation 72af4b8f-6553-40bf-942e-52e8c9dd0279 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 13

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.032776Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.032776Z digest=sha256:018c2f0210445d961b4991e0b19825919292f7b233c1d4b528e03a71a68253e3

Observation 2af2e458-1cdf-4e87-b418-3e3052e0dc33 · outbound

This paper cites DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents DeltaBox: Scaling Stateful AI Agents with Millisecond-Level Sandbox Checkpoint/Rollback

Reference 14

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.109445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.109445Z digest=sha256:c36ab7aee71fa2d8f174aac84a87919f6a3964d5523008700eb6538e076e3fe0

Observation fad9a5c7-0d2c-44d0-877b-c75d60c18138 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 15

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.574208Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

source=pdf_text observed=2026-07-31T10:25:16.182441Z digest=sha256:01e92fbc86020b7181d3df16f11be245caf024b431a9c4fed33c3c009a6d2609

Observation 28744486-3702-4cd5-857e-e4c991e63070 · outbound

This paper cites Goguen and José Meseguer.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Goguen and José Meseguer

Reference 16

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.280411Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.280411Z digest=sha256:49ae9a39dab3b33f9fbb13f781abbe8af3db3017e063e08ad813f9c0d0941fec

Observation a5409f0a-e91b-48ee-be08-7ab2f571cdcd · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 17

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.487235Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.487235Z digest=sha256:dee62e31591e737891c0154f780d6f645452af400d2d72c67c7b57acc45c1949

Observation 52fc861f-2bb0-4df9-b160-3412bb430bff · outbound

This paper cites 2026.SMCP: Secure Model Context Protocol.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2026.SMCP: Secure Model Context Protocol

Reference 18

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.568654Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.568654Z digest=sha256:533754a594dc662a33b9345df3459af236e8ca32f4aa27b2c2aa90b5531bcb26

Observation f641e18b-e95a-476b-b228-103f8655fd41 · outbound

This paper cites Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

Reference 19

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.638678Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.638678Z digest=sha256:5af4992cdd8523503eed4876fe1de8157022098514d0546e52e1dcf569437e06

Observation d1b40f3a-30c9-4ca8-ab6a-d6a53d17688b · outbound

This paper cites Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations

Reference 20

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.690688Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.690688Z digest=sha256:fb9a6e6c83efb95888474f05c8f7692f33e509101ac1eba5f4f741e4fe7afc31

Observation 8cc205a5-3ff6-452b-8f9a-b520c1e717fb · outbound

This paper cites Jensen and William H.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Jensen and William H

Reference 21

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.773463Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.773463Z digest=sha256:f74026613bdfc52ed28bd2b359ac5f91d31a505ddb6023a52db94e592444d1b3

Observation c02938b6-e6fc-4a06-ae25-5c0fe5f89e73 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 22

Resolution
malformed identifier
no resolver link, observed 2026-07-31T10:25:16.846874Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.846874Z digest=sha256:851576db1f5760e72b6b4d80c0950cd6b2c6bee4c91b528e5a2cb525186cd40d

Observation 95680ee0-5893-40b4-8973-ef9edf894448 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 23

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:16.964904Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:16.964904Z digest=sha256:0fea81e44f01e83734c24f327debaef4ee0e6d3cfc9e34c47434d705a09b9c6d

Observation 6f63ebfe-f1e7-42be-a4dc-bcf9e0783298 · outbound

This paper cites Frans Kaashoek, Eddie Kohler, and Robert Morris.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Frans Kaashoek, Eddie Kohler, and Robert Morris

Reference 24

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.030546Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.030546Z digest=sha256:8fc436b76a37e308ca545afb583c841d7b3d495cca795e16c0cf67e04ce33d57

Observation 22ae7ad4-2b14-42d1-b280-f2d0ef46685d · outbound

This paper cites Gonzalez, Haotong Zhang, and Ion Stoica.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Gonzalez, Haotong Zhang, and Ion Stoica

Reference 25

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.122352Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.122352Z digest=sha256:5c440ec5081b410ccfb99af7190b4bc893a7ea727befa8422e871670b78a8eeb

Observation 0d58e3f1-7a2d-4488-9ca9-5f2407cd6a9b · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 26

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.169218Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.169218Z digest=sha256:2e313e48d131bd5ff05ebec0102ed5dec520f9d613fff243c39f78b88a7431f7

Observation 2ddf7dd7-8277-4838-b5b8-1b26295f9315 · outbound

This paper cites ACE: A Security Architecture for LLM-Integrated App Systems.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents ACE: A Security Architecture for LLM-Integrated App Systems

Reference 27

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.207949Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.207949Z digest=sha256:a324d8fabde66cdf154f640b0b29c432fbdb3698bd100f7f1cffa9d680c8724e

Observation 08f666c6-bfe2-4240-a834-2977d9093667 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.254331Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.254331Z digest=sha256:228f798380918fbab3ff4477f68bd5d3ae9a803bf3679b59d7393ef85c83d325

Observation b362d773-54be-4fd9-893a-063e69095f3f · outbound

This paper cites 2025.ceLLMate: Sandboxing Browser AI Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2025.ceLLMate: Sandboxing Browser AI Agents

Reference 29

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.288952Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.288952Z digest=sha256:21fed70358c26b48b6ee3a4b532cf38973f01cb25229de90739bde76aecff5cc

Observation 4d19128f-4ce6-4f6b-9687-9f6fed825d32 · outbound

This paper cites Miller and Jonathan S.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Miller and Jonathan S

Reference 30

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.421769Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

source=pdf_text observed=2026-07-31T10:25:17.330145Z digest=sha256:936764bcebc624e8a4a51ef3e11f3a6ad464ec4d9d6938572f7ae083783f67e5

Observation 059b7df6-b078-4cc0-9d10-c51a25cc430a · outbound

This paper cites Myers and Barbara Liskov.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Myers and Barbara Liskov

Reference 31

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.375801Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.375801Z digest=sha256:70455b29336d1a35249628069df9ed256e898c9d669d90d95e4a2db0af9d4d80

Observation 1e9c341d-7432-43d1-9f00-ef50e7c6d732 · outbound

This paper cites Needham and Michael D.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Needham and Michael D

Reference 32

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.419376Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.419376Z digest=sha256:403fb72ae55505d51145c466c66f8ab1756719b51531935687f4db9156c4f55c

Observation e0163d9c-e74d-427c-b1a0-5888fe3acc42 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 33

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.487836Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.487836Z digest=sha256:b7bceeb30e314b04ef2d0d7eb1489e274a015dda4f7d372d84b598cb374b34ec

Observation 2b32f4d1-45de-410c-a7c4-0a4e2cf236c4 · outbound

This paper cites MemLineage: Lineage-Guided Enforcement for LLM Agent Memory.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents MemLineage: Lineage-Guided Enforcement for LLM Agent Memory

Reference 34

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.584642Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.584642Z digest=sha256:7175c7faccf7e7d7ae2b09d91e29a9f3f7ef0499a50a9b1bfc05e13daf08201a

Observation 3dfb20f2-7298-4ef2-93c2-9fa6001e79a2 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 35

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.621097Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.621097Z digest=sha256:f08cd173e139db7557e1aca1c3de2846a6d0a7487216c1e22912ab34e3f1023b

Observation 950b4184-2ff3-41ea-a117-ac371f5e0915 · outbound

This paper cites 2023.NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2023.NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications

Reference 36

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.661479Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.661479Z digest=sha256:5b0ef05f9490e80ab616c88f0a15654085ed544f993e681808cf4ad5c87c53ad

Observation 710bf588-c76d-427f-a9a9-577a6a553c8e · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 37

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.697081Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.697081Z digest=sha256:96e80112aa82b6ea4e9f9bf3d58126bdd893ecec192de3706e3cbcdcc57d98e3

Observation f8e344a7-6e26-4555-834b-453299a767ff · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 38

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.737499Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.737499Z digest=sha256:d23a6aadcac2c55faa05feda2b7cd7e2367d5f04ec3b46d80f1f34191aba9def

Observation a03d16af-3851-4840-9585-1f95da5567b8 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 39

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.777921Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.777921Z digest=sha256:caa39e414337dd65dabaf57807414aca9adf6a8feacac035275c2a5bec5c8e43

Observation 09d9cb12-3ff1-4e53-8147-9890b1ae03d1 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 40

Resolution
malformed identifier
doi_truncated, observed 2026-07-31T10:26:29.216916Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

source=pdf_text observed=2026-07-31T10:25:17.818284Z digest=sha256:add4910a886516a21e368a2f652a96c6b2ae955b2bdb0acd49fe2340cb466cad

Observation 60bc27fc-1824-41ed-a853-bbc65937ec46 · outbound

This paper cites Saltzer and Michael D.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Saltzer and Michael D

Reference 41

Resolution
malformed identifier
no resolver link, observed 2026-07-31T10:25:17.860501Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.860501Z digest=sha256:ac94b931b44f8f7a8f5ca16f66689d8a97c5f7068ed4b9d452a815ebc07e32ee

Observation 37d58e06-6ded-498b-80f0-153d91feb3f1 · outbound

This paper cites Schwartz, Thanassis Avgerinos, and David Brumley.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Schwartz, Thanassis Avgerinos, and David Brumley

Reference 42

Resolution
verified exact
doi, observed 2026-07-31T10:26:29.036064Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

source=pdf_text observed=2026-07-31T10:25:17.897367Z digest=sha256:f94eb70f56977319f7ee1dc0c87cbc1fedcf9179f34773bcb98632b532416224

Observation a032a7b1-7352-4f70-ae67-999c19670fb7 · outbound

This paper cites Mitchell, and David Mazières.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Mitchell, and David Mazières

Reference 43

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.930533Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.930533Z digest=sha256:e6b56422f1b8e581727c5c5ad5d978bf50ce056c92258d8dd962f9fd4b82301a

Observation 5d9d309e-7cc6-4c0c-afb0-35b896eb6644 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 44

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.965487Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.965487Z digest=sha256:04f213380dce01f93081d423116decdb42a5934dfab510e59e1cd3d72d4083fb

Observation 44135f1b-310d-4854-969c-2e9fdf22e45e · outbound

This paper cites AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents

Reference 45

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.009688Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.009688Z digest=sha256:f4d7fb4ec5b17068bc2a723f0017bfacb11cd9afae0fa2ae747b76618d73d292

Observation 15970527-ab3d-4dd9-a3b2-0362adf86b9d · outbound

This paper cites From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents

Reference 46

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.046653Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.046653Z digest=sha256:9144eb3e58d8e1df4f3d383e0604af5bdc52d1de32790711eb03219b882ddd55

Observation cd58cb66-8bc1-49f6-ad79-fcee7e7dbf29 · outbound

This paper cites From Agent Loops to Structured Graphs:A Scheduler-Theoretic Framework for LLM Agent Execution.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents From Agent Loops to Structured Graphs:A Scheduler-Theoretic Framework for LLM Agent Execution

Reference 47

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.111860Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.111860Z digest=sha256:ee644e168de714b88e51a670aafc35345f9777ffe5bcc8ae18decc3bf95a4106

Observation 100b7c66-a17a-45a0-8f49-f93b425c24cd · outbound

This paper cites 2023.The Dual LLM Pattern for Building AI Assistants That Can Resist Prompt Injection.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents 2023.The Dual LLM Pattern for Building AI Assistants That Can Resist Prompt Injection

Reference 48

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.148519Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.148519Z digest=sha256:61e8032fe5a7ac7e4d90bc6559416dd1ef333263309f726fdbb5485535ebc48a

Observation 8938ffe2-a3c2-48a6-a4f4-3568f54d6e12 · outbound

This paper cites Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Crab: A Semantics-Aware Checkpoint/Restore Runtime for Agent Sandboxes

Reference 49

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.186333Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.186333Z digest=sha256:bd4d92aea3dc1c85f4e905237d2f61c18bbcd243f41e506ae9b1724e5419fdfd

Observation bda3359f-bcdf-41a7-b4e6-93659cba1a58 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 50

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.216641Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.216641Z digest=sha256:80efbc22d96d02af6210eb1143135ce33735e2ecdf3d7811c397d6a9e0e7711a

Observation 9045eab2-1096-4284-b0d3-6e6456a918d4 · outbound

This paper cites an unresolved cited work.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Unresolved cited work

Reference 51

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.255814Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.255814Z digest=sha256:b670dcd58db77e91e1ff277f7c22c7015e68f4a88d3dc397f318435d20e1d808

Observation 9dad7a4f-d1a1-4aa2-88db-76d8328dd82d · outbound

This paper cites SGLang: Efficient Execution of Structured Language Model Programs.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents SGLang: Efficient Execution of Structured Language Model Programs

Reference 52

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.288712Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.288712Z digest=sha256:5c61636d4eb1a62163ae2418c31958e5ff7d0247a8c0b5a44de8c35c3286a1a1

Observation 5a18b45f-6601-4a1f-acfe-af4cdcd02b96 · outbound

This paper cites send the routine email: to all@northwind. example, subject ‘Routine update’, body ‘The scheduled corporate update is complete. ’.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents send the routine email: to all@northwind. example, subject ‘Routine update’, body ‘The scheduled corporate update is complete. ’

Reference 53

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:18.320400Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:18.320400Z digest=sha256:5e3cae57b3b394475df5a5395635b4b22e4d9c9264457466d5379d73facbeeb3

Observation f362ef25-5060-46a4-9ae9-448abaffc082 · outbound

This paper cites InFindings of the Association for Computational Linguistics: ACL 2024.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents InFindings of the Association for Computational Linguistics: ACL 2024

Reference 2024

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:15.779954Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:15.779954Z digest=sha256:b0f1191b5b7818a576884f684ec096e4dc82af92dff34898ecfff4c0a321cc85

Observation 75e33d6b-9bc4-4e1e-a2db-bcd93aeca6dd · outbound

This paper cites Tracking Capabilities for Safer Agents.

Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents Tracking Capabilities for Safer Agents

Reference 2026

Resolution
unresolved
no resolver link, observed 2026-07-31T10:25:17.555138Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-31T10:25:17.555138Z digest=sha256:6063f00980e5b24b4e2bee85328050d5d56d827fa51112f20dc759438c727ac8

Pith citing papers

Observation d2cbe207-0591-4469-8827-3455c6f9ad2d · inbound

Multi-Agent AI Safety as an Institutional Design Problem cites this paper.

Multi-Agent AI Safety as an Institutional Design Problem Agentic Permissions Policy Algebra for Taint Confinement in LLM Agents

Reference 18

Resolution
verified exact
local_arxiv, observed 2026-08-11T05:56:03.004575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

source=arxiv_source observed=2026-08-11T05:56:02.846369Z digest=sha256:6e324d88f87ab2c0d5bfc2f8d39774b357abaf14718b971f5143261d7a5f524f