@misc{Kraprayoon2025AiAgentGovernance,
  keywords = {academic},
  archiveprefix = {arXiv},
  author = {Kraprayoon, Jam and Williams, Zoe and Fayyaz, Rida},
  eprint = {2505.21808},
  title = {{AI} agent governance: a field guide},
  url = {https://arxiv.org/abs/2505.21808},
  year = {2025}
}

@inproceedings{Greshake2023NotWhatYou,
  keywords = {academic},
  archiveprefix = {arXiv},
  author = {Greshake, Kai and Abdelnabi, Sahar and Mishra, Shailesh and Endres, Christoph and Holz, Thorsten and Fritz, Mario},
  booktitle = {16th ACM Workshop on Artificial Intelligence and Security},
  eprint = {2302.12173},
  pages = {79--90},
  title = {Not what you've signed up for: compromising real-world llm-integrated applications with indirect prompt injection},
  url = {https://arxiv.org/abs/2302.12173},
  year = {2023}
}

@inproceedings{Yao2023ReAct,
  keywords = {academic},
 author = {Yao, Shunyu and Zhao, Jeffrey and Yu, Dian and Du, Nan and Shafran, Izhak and Narasimhan, Karthik and Cao, Yuan},
 title = {{ReAct}: Synergizing Reasoning and Acting in Language Models},
 booktitle = {International Conference on Learning Representations},
 year = {2023}, url = {https://arxiv.org/abs/2210.03629}
}
@inproceedings{Yu2018Spider,
  keywords = {academic},
 author = {Yu, Tao and Zhang, Rui and Yang, Kai and Yasunaga, Michihiro and Wang, Dongxu and Li, Zifan and Ma, James and Li, Irene and Yao, Qingning and Roman, Shanelle and Zhang, Zilin and Radev, Dragomir},
 title = {{Spider}: A Large-Scale Human-Labeled Dataset for Complex and Cross-Domain Semantic Parsing and Text-to-{SQL} Task},
 booktitle = {Proceedings of EMNLP}, year = {2018}, pages = {3911--3921},
 url = {https://aclanthology.org/D18-1425/}
}
@online{Anthropic2024Agents,
  keywords = {academic},
 author = {{Anthropic}}, title = {Building effective agents},
 year = {2024}, url = {https://www.anthropic.com/research/building-effective-agents}
}
@online{OpenAI2026Functions,
  keywords = {implementation},
 author = {{OpenAI}}, title = {Function calling}, year = {2026},
 url = {https://developers.openai.com/api/docs/guides/function-calling}, urldate = {2026-10-29}
}
@online{MCP2026Architecture,
  keywords = {implementation},
 author = {{Model Context Protocol}}, title = {Architecture overview}, year = {2026},
 url = {https://modelcontextprotocol.io/docs/learn/architecture}, urldate = {2026-10-29}
}
@online{MCP2025Tools,
 keywords = {implementation},
 author = {{Model Context Protocol}}, title = {Tools},
 date = {2025-11-25},
 note = {Model Context Protocol specification, version 2025-11-25},
 url = {https://modelcontextprotocol.io/specification/2025-11-25/server/tools},
 urldate = {2026-10-30}
}
@online{SQLite2026Authorizer,
  keywords = {implementation},
 author = {{SQLite}}, title = {Compile-Time Authorization Callbacks}, year = {2026},
 url = {https://www.sqlite.org/c3ref/set_authorizer.html}, urldate = {2026-10-29}
}
@online{SQLite2026Progress,
  keywords = {implementation},
 author = {{SQLite}}, title = {Query Progress Callbacks}, year = {2026},
 url = {https://www.sqlite.org/c3ref/progress_handler.html}, urldate = {2026-10-29}
}

@online{Booth2026AgentIdentity,
 keywords = {academic},
 author = {Booth, Harold and Fisher, Bill and Galluzzo, Ryan and Clancy, Tom},
 title = {Design Tenets for Agent Identity Management Systems},
 organization = {National Institute of Standards and Technology},
 date = {2026-10-27},
 url = {https://www.nist.gov/blogs/cybersecurity-insights/design-tenets-agent-identity-management-systems},
 urldate = {2026-10-29}
}
@online{MCP2025Security,
 keywords = {implementation},
 author = {{Model Context Protocol}}, title = {Security Best Practices},
 year = {2025},
 url = {https://modelcontextprotocol.io/specification/2025-11-25/basic/security_best_practices},
 urldate = {2026-10-29}
}