@article{dennis1966,
  author  = {Dennis, Jack B. and Van Horn, Earl C.},
  title   = {Programming Semantics for Multiprogrammed Computations},
  journal = {Communications of the ACM},
  volume  = {9},
  number  = {3},
  pages   = {143--155},
  year    = {1966}
}

@phdthesis{miller2006,
  author = {Miller, Mark Samuel},
  title  = {Robust Composition: Towards a Unified Approach to Access Control and Concurrency Control},
  school = {Johns Hopkins University},
  year   = {2006}
}

@inproceedings{macaroons,
  author    = {Birgisson, Arnar and Politz, Joe Gibbs and Erlingsson, {\'U}lfar and Taly, Ankur and Vrable, Michael and Lentczner, Mark},
  title     = {Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud},
  booktitle = {Network and Distributed System Security Symposium (NDSS)},
  year      = {2014}
}

@inproceedings{sel4,
  author    = {Klein, Gerwin and Elphinstone, Kevin and Heiser, Gernot and Andronick, June and Cock, David and Derrin, Philip and Elkaduwe, Dhammika and Engelhardt, Kai and Kolanski, Rafal and Norrish, Michael and Sewell, Thomas and Tuch, Harvey and Winwood, Simon},
  title     = {{seL4}: Formal Verification of an {OS} Kernel},
  booktitle = {Symposium on Operating Systems Principles (SOSP)},
  year      = {2009}
}

@misc{gvisor,
  author       = {{Google}},
  title        = {{gVisor}: Application Kernel for Containers},
  howpublished = {\url{https://gvisor.dev}},
  year         = {2018}
}

@misc{firecracker,
  author       = {{Amazon Web Services}},
  title        = {{Firecracker}: Secure and Fast {microVMs} for Serverless Computing},
  howpublished = {\url{https://firecracker-microvm.github.io}},
  year         = {2018}
}

@inproceedings{intoto,
  author    = {Torres-Arias, Santiago and Afzali, Hammad and Kuppusamy, Trishank Karthik and Curtmola, Reza and Cappos, Justin},
  title     = {in-toto: Providing Farm-to-Table Guarantees for Bits and Bytes},
  booktitle = {USENIX Security Symposium},
  year      = {2019}
}

@misc{slsa,
  author       = {{Open Source Security Foundation}},
  title        = {Supply-chain Levels for Software Artifacts ({SLSA})},
  howpublished = {\url{https://slsa.dev}},
  year         = {2021}
}

@inproceedings{sigstore,
  author    = {Newman, Zachary and Meyers, John Speed and Torres-Arias, Santiago},
  title     = {Sigstore: Software Signing for Everybody},
  booktitle = {ACM Conference on Computer and Communications Security (CCS)},
  year      = {2022}
}

@article{ed25519,
  author  = {Bernstein, Daniel J. and Duif, Niels and Lange, Tanja and Schwabe, Peter and Yang, Bo-Yin},
  title   = {High-speed High-security Signatures},
  journal = {Journal of Cryptographic Engineering},
  volume  = {2},
  number  = {2},
  pages   = {77--89},
  year    = {2012}
}

@misc{nakamoto2008,
  author       = {Nakamoto, Satoshi},
  title        = {Bitcoin: A Peer-to-Peer Electronic Cash System},
  year         = {2008},
  howpublished = {\url{https://bitcoin.org/bitcoin.pdf}}
}

@misc{yakovenko2018,
  author       = {Yakovenko, Anatoly},
  title        = {Solana: A New Architecture for a High Performance Blockchain},
  year         = {2018},
  howpublished = {Whitepaper}
}

@inproceedings{react,
  author    = {Yao, Shunyu and Zhao, Jeffrey and Yu, Dian and Du, Nan and Shafran, Izhak and Narasimhan, Karthik and Cao, Yuan},
  title     = {{ReAct}: Synergizing Reasoning and Acting in Language Models},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year      = {2023}
}

@inproceedings{toolformer,
  author    = {Schick, Timo and Dwivedi-Yu, Jane and Dess{\`\i}, Roberto and Raileanu, Roberta and Lomeli, Maria and Zettlemoyer, Luke and Cancedda, Nicola and Scialom, Thomas},
  title     = {Toolformer: Language Models Can Teach Themselves to Use Tools},
  booktitle = {Neural Information Processing Systems (NeurIPS)},
  year      = {2023}
}

@misc{autogen,
  author       = {Wu, Qingyun and Bansal, Gagan and Zhang, Jieyu and Wu, Yiran and Li, Beibin and Zhu, Erkang and Jiang, Li and Zhang, Xiaoyun and Zhang, Shaokun and Liu, Jiale and Awadallah, Ahmed Hassan and White, Ryen W. and Burger, Doug and Wang, Chi},
  title        = {{AutoGen}: Enabling Next-Gen {LLM} Applications via Multi-Agent Conversation},
  year         = {2023},
  howpublished = {arXiv:2308.08155}
}

@misc{mcp,
  author       = {{Anthropic}},
  title        = {Model Context Protocol Specification},
  howpublished = {\url{https://modelcontextprotocol.io}},
  year         = {2024}
}

@misc{a2a,
  author       = {{Google}},
  title        = {Agent-to-Agent ({A2A}) Protocol},
  howpublished = {\url{https://a2a.dev}},
  year         = {2024}
}

@misc{sweagent,
  author       = {Yang, John and Jimenez, Carlos E. and Wettig, Alexander and Lieret, Kilian and Yao, Shunyu and Narasimhan, Karthik and Press, Ofir},
  title        = {{SWE-agent}: Agent-Computer Interfaces Enable Automated Software Engineering},
  year         = {2024},
  howpublished = {arXiv:2405.15793}
}

@misc{opendevin,
  author       = {Wang, Xingyao and Li, Boxuan and Song, Yufan and Xu, Frank F. and Tang, Xiangru and Zhuge, Mingchen and Pan, Jiayi and Song, Yueqi and Li, Bowen and Singh, Jaskirat and Tran, Hoang H. and Li, Fuqiang and Ma, Ren and Zheng, Mingzhang and Qian, Bill and Shao, Yanjun and Muennighoff, Niklas and Zhang, Yizhe and Hui, Binyuan and Lin, Junyang and Brennan, Robert and Peng, Hao and Ji, Heng and Neubig, Graham},
  title        = {{OpenDevin}: An Open Platform for {AI} Software Developers as Generalist Agents},
  year         = {2024},
  howpublished = {arXiv:2407.16741}
}
