{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:27GUGGBUZTLJOWWUURLA2ADRGX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0a2f9136c9a0057b77cf7af46cb20eb8526ccdd391b6379d356fc15f9521a9d7","cross_cats_sorted":["cs.AI","cs.CL","cs.SY","eess.SY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-12T02:01:38Z","title_canon_sha256":"3d50f070d18a12092f3bdab1e3e028f4e74be8f468cb3f58b5ad529b8d06fd57"},"schema_version":"1.0","source":{"id":"2606.14027","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.14027","created_at":"2026-07-01T00:17:12Z"},{"alias_kind":"arxiv_version","alias_value":"2606.14027v3","created_at":"2026-07-01T00:17:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.14027","created_at":"2026-07-01T00:17:12Z"},{"alias_kind":"pith_short_12","alias_value":"27GUGGBUZTLJ","created_at":"2026-07-01T00:17:12Z"},{"alias_kind":"pith_short_16","alias_value":"27GUGGBUZTLJOWWU","created_at":"2026-07-01T00:17:12Z"},{"alias_kind":"pith_short_8","alias_value":"27GUGGBU","created_at":"2026-07-01T00:17:12Z"}],"graph_snapshots":[{"event_id":"sha256:542ef6ea7d37ffbd3d2538a5e9671a3e8cc37072e62b7e46226a9bdfedd34837","target":"graph","created_at":"2026-07-01T00:17:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.14027/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Agentic browsers integrate autonomous AI agents into web browsers, enabling users to accomplish web tasks through natural-language instructions. The same-origin policy (SOP) is a fundamental browser security mechanism that prevents unauthorized automated cross-origin data flows induced by scripts. However, whether SOP remains effective in agentic browsers is an open question that has not been systematically studied. In this work, we bridge this gap. We first observe that an agentic browser can itself serve as an automated channel for cross-origin data flows, potentially leading to SOP violatio","authors_text":"Dawn Song, Neil Gong, Patrick Li, Xiaoxing Chen, Xilong Wang","cross_cats":["cs.AI","cs.CL","cs.SY","eess.SY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-12T02:01:38Z","title":"Same-Origin Policy for Agentic Browsers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.14027","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:de38308a91f279f7b026c8de63f568b86ca2c6098f68da571db76972cb02680e","target":"record","created_at":"2026-07-01T00:17:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0a2f9136c9a0057b77cf7af46cb20eb8526ccdd391b6379d356fc15f9521a9d7","cross_cats_sorted":["cs.AI","cs.CL","cs.SY","eess.SY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-12T02:01:38Z","title_canon_sha256":"3d50f070d18a12092f3bdab1e3e028f4e74be8f468cb3f58b5ad529b8d06fd57"},"schema_version":"1.0","source":{"id":"2606.14027","kind":"arxiv","version":3}},"canonical_sha256":"d7cd431834ccd6975ad4a4560d007135f7e249694b36f544920f6daffa7037aa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d7cd431834ccd6975ad4a4560d007135f7e249694b36f544920f6daffa7037aa","first_computed_at":"2026-07-01T00:17:12.009866Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-01T00:17:12.009866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GzUKWbcKTAPyCoPYjKAvEXD+niA9+oVUOrODxBYbUcG37/YGlPgRmkxbvr6M+UFe32aEgpyUZc1SDGa83GqcCw==","signature_status":"signed_v1","signed_at":"2026-07-01T00:17:12.010351Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.14027","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:de38308a91f279f7b026c8de63f568b86ca2c6098f68da571db76972cb02680e","sha256:542ef6ea7d37ffbd3d2538a5e9671a3e8cc37072e62b7e46226a9bdfedd34837"],"state_sha256":"bd96f4b50d3896776251f7c1fe4941c34594f476bab5eee770e9d02f9de65b5e"}