{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2GVGXCA6RTP564Z2L57E4ELUOJ","short_pith_number":"pith:2GVGXCA6","canonical_record":{"source":{"id":"2402.14859","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-20T23:08:21Z","cross_cats_sorted":["cs.AI","cs.CY","cs.LG"],"title_canon_sha256":"87fb0c53e713180cd949f1f39efea0ad479a2ead3a5e7b29f5c91392b64007d7","abstract_canon_sha256":"4acf1c0911e4bf4544fda0ba4b635c936377c0bf4e1e26f23f1000b2f892b246"},"schema_version":"1.0"},"canonical_sha256":"d1aa6b881e8cdfdf733a5f7e4e1174727be4b8b520fb3e85b34cdb4424c156ba","source":{"kind":"arxiv","id":"2402.14859","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14859","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14859v2","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14859","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_12","alias_value":"2GVGXCA6RTP5","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_16","alias_value":"2GVGXCA6RTP564Z2","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_8","alias_value":"2GVGXCA6","created_at":"2026-07-05T08:26:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2GVGXCA6RTP564Z2L57E4ELUOJ","target":"record","payload":{"canonical_record":{"source":{"id":"2402.14859","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-20T23:08:21Z","cross_cats_sorted":["cs.AI","cs.CY","cs.LG"],"title_canon_sha256":"87fb0c53e713180cd949f1f39efea0ad479a2ead3a5e7b29f5c91392b64007d7","abstract_canon_sha256":"4acf1c0911e4bf4544fda0ba4b635c936377c0bf4e1e26f23f1000b2f892b246"},"schema_version":"1.0"},"canonical_sha256":"d1aa6b881e8cdfdf733a5f7e4e1174727be4b8b520fb3e85b34cdb4424c156ba","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:26:20.398395Z","signature_b64":"kyePydfhzhUDO1U++dfZ4n4CKsh0azoqv9d+bOdqI33PPLAcPOgd9VxRWLZuXzEkGihZQCixxAYSHBXUTpQZBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d1aa6b881e8cdfdf733a5f7e4e1174727be4b8b520fb3e85b34cdb4424c156ba","last_reissued_at":"2026-07-05T08:26:20.397839Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:26:20.397839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.14859","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:26:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZHgIcekfl5+wig7agKJeH2dKRhbhVGzxRKrKcsrLGnUNaAHkFfU12rSi5UDP0eTW7dwnoBmIqOlt9xzzN4W/Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:19:49.006582Z"},"content_sha256":"33ae37803a3347f663c04dc9069d5a6598043b2251940e3797878e3ef4b4de7e","schema_version":"1.0","event_id":"sha256:33ae37803a3347f663c04dc9069d5a6598043b2251940e3797878e3ef4b4de7e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2GVGXCA6RTP564Z2L57E4ELUOJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Wolf Within: Covert Injection of Malice into MLLM Societies via an MLLM Operative","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CY","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chengshuai Zhao, Huan Liu, Raha Moraffah, Tianlong Chen, Yifan Li, Yu Kong, Zhen Tan","submitted_at":"2024-02-20T23:08:21Z","abstract_excerpt":"Due to their unprecedented ability to process and respond to various types of data, Multimodal Large Language Models (MLLMs) are constantly defining the new boundary of Artificial General Intelligence (AGI). As these advanced generative models increasingly form collaborative networks for complex tasks, the integrity and security of these systems are crucial. Our paper, ``The Wolf Within'', explores a novel vulnerability in MLLM societies - the indirect propagation of malicious content. Unlike direct harmful output generation for MLLMs, our research demonstrates how a single MLLM agent can be s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14859","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.14859/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:26:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zAB9FgU9UnFQfwjmub/hDPQaGAwymGIns8x7KCL3UvediY7VzdPAj6friqQCQpjxqqX4wcta1j6tDIi/FZwkDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:19:49.006978Z"},"content_sha256":"79c2424c8714a1c7b35bc50e5a6846bb9b277c51d51c0f6d877c0fba2c9a5ee7","schema_version":"1.0","event_id":"sha256:79c2424c8714a1c7b35bc50e5a6846bb9b277c51d51c0f6d877c0fba2c9a5ee7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2GVGXCA6RTP564Z2L57E4ELUOJ/bundle.json","state_url":"https://pith.science/pith/2GVGXCA6RTP564Z2L57E4ELUOJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2GVGXCA6RTP564Z2L57E4ELUOJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:19:49Z","links":{"resolver":"https://pith.science/pith/2GVGXCA6RTP564Z2L57E4ELUOJ","bundle":"https://pith.science/pith/2GVGXCA6RTP564Z2L57E4ELUOJ/bundle.json","state":"https://pith.science/pith/2GVGXCA6RTP564Z2L57E4ELUOJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2GVGXCA6RTP564Z2L57E4ELUOJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2GVGXCA6RTP564Z2L57E4ELUOJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4acf1c0911e4bf4544fda0ba4b635c936377c0bf4e1e26f23f1000b2f892b246","cross_cats_sorted":["cs.AI","cs.CY","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-20T23:08:21Z","title_canon_sha256":"87fb0c53e713180cd949f1f39efea0ad479a2ead3a5e7b29f5c91392b64007d7"},"schema_version":"1.0","source":{"id":"2402.14859","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.14859","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"arxiv_version","alias_value":"2402.14859v2","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.14859","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_12","alias_value":"2GVGXCA6RTP5","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_16","alias_value":"2GVGXCA6RTP564Z2","created_at":"2026-07-05T08:26:20Z"},{"alias_kind":"pith_short_8","alias_value":"2GVGXCA6","created_at":"2026-07-05T08:26:20Z"}],"graph_snapshots":[{"event_id":"sha256:79c2424c8714a1c7b35bc50e5a6846bb9b277c51d51c0f6d877c0fba2c9a5ee7","target":"graph","created_at":"2026-07-05T08:26:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.14859/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Due to their unprecedented ability to process and respond to various types of data, Multimodal Large Language Models (MLLMs) are constantly defining the new boundary of Artificial General Intelligence (AGI). As these advanced generative models increasingly form collaborative networks for complex tasks, the integrity and security of these systems are crucial. Our paper, ``The Wolf Within'', explores a novel vulnerability in MLLM societies - the indirect propagation of malicious content. Unlike direct harmful output generation for MLLMs, our research demonstrates how a single MLLM agent can be s","authors_text":"Chengshuai Zhao, Huan Liu, Raha Moraffah, Tianlong Chen, Yifan Li, Yu Kong, Zhen Tan","cross_cats":["cs.AI","cs.CY","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-20T23:08:21Z","title":"The Wolf Within: Covert Injection of Malice into MLLM Societies via an MLLM Operative"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.14859","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:33ae37803a3347f663c04dc9069d5a6598043b2251940e3797878e3ef4b4de7e","target":"record","created_at":"2026-07-05T08:26:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4acf1c0911e4bf4544fda0ba4b635c936377c0bf4e1e26f23f1000b2f892b246","cross_cats_sorted":["cs.AI","cs.CY","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-20T23:08:21Z","title_canon_sha256":"87fb0c53e713180cd949f1f39efea0ad479a2ead3a5e7b29f5c91392b64007d7"},"schema_version":"1.0","source":{"id":"2402.14859","kind":"arxiv","version":2}},"canonical_sha256":"d1aa6b881e8cdfdf733a5f7e4e1174727be4b8b520fb3e85b34cdb4424c156ba","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d1aa6b881e8cdfdf733a5f7e4e1174727be4b8b520fb3e85b34cdb4424c156ba","first_computed_at":"2026-07-05T08:26:20.397839Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:26:20.397839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kyePydfhzhUDO1U++dfZ4n4CKsh0azoqv9d+bOdqI33PPLAcPOgd9VxRWLZuXzEkGihZQCixxAYSHBXUTpQZBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:26:20.398395Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.14859","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:33ae37803a3347f663c04dc9069d5a6598043b2251940e3797878e3ef4b4de7e","sha256:79c2424c8714a1c7b35bc50e5a6846bb9b277c51d51c0f6d877c0fba2c9a5ee7"],"state_sha256":"c645930463d6fb05c230a55c8a71a80c270a05d6be1fe5d48e6a916f85a80211"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ylfX0914OY0mdMW2cVe23A2QrNAlVZwB9R4WqBxJDhgGCQJPlj46f4vIQM+0bakUZuYFM0damgQR/bwg2DXXAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:19:49.010195Z","bundle_sha256":"047da5fb61e63cd16346a5cce6aae37c5b51fa0163641b138e10d51f523b3d69"}}