Research discovery wing · kingdom.research-observatory-publication/0.1
A bounded conversion membrane between public research metadata and human attention. It preserves sources, exact identifiers, updates, contradictions, and reasons to look—without pretending that discovery is truth or permission.
This is a bounded capture, not a claim of complete global coverage.The snapshot preserves imported metadata returned by explicit allowlisted polls through 2026-08-20T18:10:14Z. Source lag, index gaps, English-only watch terms, and missed later updates remain visible limits. Importing and page rendering make no network request; the earlier harvest did.
A later module would be KINGDOM-owned code. A later guest would stay source-owned under a narrow, revocable contract. Neither path is proposed by an attention signal, and this snapshot creates neither.
English terms · multilingual expansion absent
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
English terms · multilingual expansion absent
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
English terms · multilingual expansion absent
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
The terms are intentionally visible and incomplete. No translation is guessed, no prestige factor is used, and no scalar “high value” score hides the judgment.
Cards are ordered by latest source observation, then stable work ID—not by scientific value. Titles, author names, identifiers, and links below are inert source data. A match orders possible human attention; it is not an endorsement, safety finding, truth verdict, or instruction.
preprint · active Observed — not evaluated
arxiv:2608.00997
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
No source change relation in this snapshot.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: arxivA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentExpose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-02software · active Observed — not evaluated
doi:10.5281/zenodo.21729883
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
2 factual source-change assertions also surfaced this work; the source text appears under What changed.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
The source relation creates an edge; it does not silently merge the records.
The source relation creates an edge; it does not silently merge the records.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: dataciteA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: uninterpreted item licence:mitExpose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-01preprint · active Observed — not evaluated
doi:10.5281/zenodo.21731418 openalex:W7172128171
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
3 factual source-change assertions also surfaced this work; the source text appears under What changed.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
The source relation creates an edge; it does not silently merge the records.
Exact shared identifiers connect the observations; this does not independently verify the research claim.
The observations remain separate even when exact identifiers resolve to one work.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: datacite · openalexA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by · reported item licence:cc-by-4.0Expose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-01software · active Observed — not evaluated
doi:10.5281/zenodo.21736124
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
2 factual source-change assertions also surfaced this work; the source text appears under What changed.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
The source relation creates an edge; it does not silently merge the records.
The source relation creates an edge; it does not silently merge the records.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: dataciteA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: uninterpreted item licence:mitExpose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-01preprint · active Observed — not evaluated
doi:10.5281/zenodo.21731417 openalex:W7172123867
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
4 factual source-change assertions also surfaced this work; the source text appears under What changed.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
The source relation creates an edge; it does not silently merge the records.
2 source assertions representedExact shared identifiers connect the observations; this does not independently verify the research claim.
The observations remain separate even when exact identifiers resolve to one work.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: datacite · openalexA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by · reported item licence:cc-by-4.0Expose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-01preprint · active Observed — not evaluated
doi:10.5281/zenodo.21740544
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
1 factual source-change assertion also surfaced this work; the source text appears under What changed.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
The source relation creates an edge; it does not silently merge the records.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: dataciteA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by-4.0Expose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-01preprint · active Observed — not evaluated
doi:10.5281/zenodo.21906711 openalex:W7202247495
Matched reviewed English terms: mechanistic interpretability, sparse autoencoder.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: preprintSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretability · sparse autoencoderShow source and update dates without treating recency as validity.
Evidence: 2026-08-12preprint · active Observed — not evaluated
doi:10.5281/zenodo.21906710 openalex:W7202273798
Matched reviewed English terms: mechanistic interpretability, sparse autoencoder.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: preprintSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretability · sparse autoencoderShow source and update dates without treating recency as validity.
Evidence: 2026-08-14preprint · active Observed — not evaluated
doi:10.48550/arxiv.2608.08168 openalex:W7202210108
Matched reviewed English terms: sparse autoencoder.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: preprintSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: sparse autoencoderShow source and update dates without treating recency as validity.
Evidence: 2026-08-08preprint · active Observed — not evaluated
doi:10.2139/ssrn.7276838
Matched reviewed English terms: indirect prompt injection, prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: crossrefSecurity claims need visible review and replication status.
Evidence: preprintA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:https://creativecommons.org/licenses/by/4.0/Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: indirect prompt injection · prompt injectionpublication · active Observed — not evaluated
doi:10.3390/app16157662
Matched reviewed English terms: indirect prompt injection, prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: crossrefSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:https://creativecommons.org/licenses/by/4.0/Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: indirect prompt injection · prompt injectionpublication · active Observed — not evaluated
doi:10.3390/electronics15163640
Matched reviewed English terms: indirect prompt injection, prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: crossrefSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:https://creativecommons.org/licenses/by/4.0/Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: indirect prompt injection · prompt injectionpublication · active Observed — not evaluated
doi:10.52202/085713-0666
Matched reviewed English terms: agent security, prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: crossrefSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: agent security · prompt injectionpublication · active Observed — not evaluated
doi:10.1109/icecet65726.2026.11632629
Matched reviewed English terms: indirect prompt injection, prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: crossrefSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: uninterpreted item licence:https://ieeexplore.ieee.org/Xplorehelp/downloads/license-information/IEEE.htmlCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: indirect prompt injection · prompt injectionpreprint · active Observed — not evaluated
doi:10.2139/ssrn.7184619
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
No source change relation in this snapshot.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: crossrefA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: uninterpreted item licence:https://www.uspto.gov/ip-policy/copyright-policy/copyright-basicsExpose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-01-01publication · active Observed — not evaluated
doi:10.1021/acs.jpclett.6c02004.s001
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
No source change relation in this snapshot.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: crossrefA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentExpose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-20publication · active Observed — not evaluated
doi:10.62791/20494
Matched reviewed English terms: agent protocol, model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
No source change relation in this snapshot.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: crossrefA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: uninterpreted item licence:http://creativecommons.org/licenses/by-nc-nd/4.0/Expose which protocol or language-interface phrase matched.
Evidence: agent protocol · model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2025-11-12publication · active Observed — not evaluated
doi:10.2196/81134 pmid:42201744 pmcid:PMC13215048 source:europe-pmc:MED:42201744
Matched reviewed English terms: mechanistic interpretability, sparse autoencoder.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: unknownSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretability · sparse autoencoderShow source and update dates without treating recency as validity.
Evidence: 2026-05-27publication · active Observed — not evaluated
doi:10.1136/bmjhci-2025-101935 pmid:41667212 pmcid:PMC12911724 source:europe-pmc:MED:41667212
Matched reviewed English terms: mechanistic interpretability.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: unknownSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretabilityShow source and update dates without treating recency as validity.
Evidence: 2026-02-10preprint · active Observed — not evaluated
arxiv:2608.07562
Matched reviewed English terms: mechanistic interpretability.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: preprintSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretabilityShow source and update dates without treating recency as validity.
Evidence: 2026-08-02publication · active Observed — not evaluated
doi:10.1007/978-3-032-32726-0_29 openalex:W7114797566
Matched reviewed English terms: model context protocol.
The match orders attention only; it is not evaluation, adoption, or use authority.
Develop inspectable natural-language software interfaces and interoperable agent protocols with bounded authority.
No source change relation in this snapshot.
Registry metadata and graph-derived relations carry different evidentiary weight.
Evidence: openalexA paper can be visible even when its linked protocol implementation is not reusable. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentExpose which protocol or language-interface phrase matched.
Evidence: model context protocolProtocol work changes quickly, so dates matter without becoming a quality score.
Evidence: 2026-08-13publication · active Observed — not evaluated
doi:10.1038/s44484-026-00014-6 pmid:42523678 source:europe-pmc:MED:42523678
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: europe-pmcSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpreprint · active Observed — not evaluated
doi:10.21203/rs.3.rs-10646218/v1 source:europe-pmc:PPR:PPR1296126
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: europe-pmcSecurity claims need visible review and replication status.
Evidence: preprintA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpublication · active Observed — not evaluated
doi:10.1016/j.bja.2026.06.041 pmid:42580931 source:europe-pmc:MED:42580931
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: europe-pmcSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpreprint · active Observed — not evaluated
arxiv:2608.00747
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: arxivSecurity claims need visible review and replication status.
Evidence: preprintA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpublication · active Observed — not evaluated
doi:10.5281/zenodo.21757178
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
2 factual source-change assertions also surfaced this work; the source text appears under What changed.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
The source relation creates an edge; it does not silently merge the records.
The source relation creates an edge; it does not silently merge the records.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: dataciteSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by-4.0Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpublication · active Observed — not evaluated
doi:10.5281/zenodo.21731493
Matched reviewed English terms: agent security.
The match orders attention only; it is not evaluation, adoption, or use authority.
2 factual source-change assertions also surfaced this work; the source text appears under What changed.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
The source relation creates an edge; it does not silently merge the records.
2 source assertions representedKeep canonical registry evidence separate from aggregator enrichment.
Evidence: dataciteSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by-4.0Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: agent securitypublication · active Observed — not evaluated
doi:10.5281/zenodo.21855133 openalex:W7201980560
Matched reviewed English terms: indirect prompt injection, prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: openalexSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-byCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: indirect prompt injection · prompt injectionpublication · active Observed — not evaluated
doi:10.5281/zenodo.21731494
Matched reviewed English terms: agent security.
The match orders attention only; it is not evaluation, adoption, or use authority.
1 factual source-change assertion also surfaced this work; the source text appears under What changed.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
The source relation creates an edge; it does not silently merge the records.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: dataciteSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by-4.0Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: agent securitypreprint · active Observed — not evaluated
doi:10.5281/zenodo.21746423
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
3 factual source-change assertions also surfaced this work; the source text appears under What changed.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
The source relation creates an edge; it does not silently merge the records.
2 source assertions representedThe source relation creates an edge; it does not silently merge the records.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: dataciteSecurity claims need visible review and replication status.
Evidence: preprintA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by-4.0Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpreprint · active Observed — not evaluated
doi:10.5281/zenodo.21746424
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
2 factual source-change assertions also surfaced this work; the source text appears under What changed.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
The source relation creates an edge; it does not silently merge the records.
The source relation creates an edge; it does not silently merge the records.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: dataciteSecurity claims need visible review and replication status.
Evidence: preprintA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: reported item licence:cc-by-4.0Corrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpublication · active Observed — not evaluated
doi:10.1007/978-3-032-31335-5_9 openalex:W4415090291
Matched reviewed English terms: prompt injection.
The match orders attention only; it is not evaluation, adoption, or use authority.
Reduce prompt-injection, confused-deputy, data-exfiltration, and capability-escalation risk in agent systems.
No source change relation in this snapshot.
Keep canonical registry evidence separate from aggregator enrichment.
Evidence: openalexSecurity claims need visible review and replication status.
Evidence: unknownA useful benchmark or implementation still needs explicit reuse rights. Source-metadata reuse terms are tracked separately and do not grant rights to the linked object.
Evidence: item-level licence absentCorrections or withdrawals can change the safe interpretation of a result.
Evidence: activeExpose the exact reviewed security term that matched.
Evidence: prompt injectionpublication · active Observed — not evaluated
doi:10.52202/085713-5000
Matched reviewed English terms: mechanistic interpretability.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: unknownSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretabilityShow source and update dates without treating recency as validity.
Evidence: 2025-01-01preprint · active Observed — not evaluated
doi:10.21203/rs.3.rs-6599791/v1
Matched reviewed English terms: mechanistic interpretability.
The match orders attention only; it is not evaluation, adoption, or use authority.
Understand, inspect, and test internal reasoning representations without treating a probe or explanation as ground truth.
No source change relation in this snapshot.
Distinguish preprint, peer-reviewed, and unknown review states.
Evidence: preprintSurface correction, withdrawal, and retraction evidence without averaging it away.
Evidence: activeExpose the exact reviewed term that matched the named need.
Evidence: mechanistic interpretabilityShow source and update dates without treating recency as validity.
Evidence: 2025-05-079 source contracts is not a poll or coverage count. Each card states whether its reviewed access lane is enabled or held. Even “live poll enabled” does not prove a successful poll or complete record coverage in this snapshot.
core · preprint-repository
Access lane: live poll enabled
Global submissions with strongest coverage in physics, mathematics, computer science, and adjacent fields.
Observed:
Expected lag: Best-effort new-submission discovery only. Offset cursors over a changing result set are not a complete or stable update/deletion feed; consumers must overlap and restart rather than claim lossless sync.
Metadata rights claim: Descriptive API metadata is offered as CC0; item content remains under its submitted licence or copyright.
core · preprint-repository
Access lane: fixture-only / policy hold
Global submissions in biology, health sciences, and medicine.
Observed:
Expected lag: Published-journal links can appear after publication and should be treated as later observations.
Metadata rights claim: Metadata API access is public; each manuscript has an author-selected content licence.
core · trial-registry
Access lane: fixture-only / policy hold
International study registrations submitted to the United States registry.
Observed:
Expected lag: Registry processing and sponsor updates can lag real-world study events.
Metadata rights claim: Registry data is publicly available with required attribution/currentness practices and third-party caveats.
core · pid-registry
Access lane: live poll enabled
Global member-deposited scholarly metadata.
Observed:
Expected lag: Deposits and later corrections arrive on publisher schedules; polling must overlap and deduplicate.
Metadata rights claim: Most bibliographic fields are factual and openly retrievable; abstracts and some deposited fields may remain copyrighted.
integrity · integrity-feed
Access lane: live poll enabled
Global Crossref update relations plus Retraction Watch records distributed through Crossref.
Observed:
Expected lag: Notices can lag the underlying event and coverage is not complete.
Metadata rights claim: The Retraction Watch database distributed by Crossref is CC0; Crossref requests citation when it is used in published work.
core · pid-registry
Access lane: live poll enabled
Global repository-deposited research objects.
Observed:
Expected lag: Created-record discovery can miss later metadata updates; updates depend on repository deposits and their metadata practices.
Metadata rights claim: DataCite DOI metadata is released under CC0.
enrichment · domain-index
Access lane: live poll enabled
Global life-science literature, preprints, grants, citations, data links, and text-mined annotations.
Observed:
Expected lag: Aggregation, citation, text-mining, and publication-link updates can trail primary registries.
Metadata rights claim: EMBL-EBI imposes no additional restriction on supplied data beyond rights held by original data owners; public queryability is not itself a reuse grant.
enrichment · research-graph
Access lane: live poll enabled
Broad global graph spanning works, authors, institutions, sources, topics, publishers, and funders.
Observed:
Expected lag: The MVP uses free from_publication_date discovery, not paid update synchronization; later metadata changes can therefore be missed unless another source reports them.
Metadata rights claim: OpenAlex metadata is released under CC0.
core · domain-index
Access lane: fixture-only / policy hold
Global biomedical and life-science citations; PMC adds an archive of participating full-text works.
Observed:
Expected lag: Publisher deposits, MeSH indexing, and linked corrections may arrive after first citation publication.
Metadata rights claim: NLM database records are downloadable under NLM terms; source-supplied material can retain separate rights.
Inspect the complete snapshot, its closed schema, and the human protocol.