{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:2USEDLUV3HERYRYSJYNND5MAQ3","short_pith_number":"pith:2USEDLUV","canonical_record":{"source":{"id":"2608.05695","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-06T07:37:49Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"883fd3b8d7730d217ae7ac55c854f8cb2bad007e8a3f8531fde5c16a6b5a06be","abstract_canon_sha256":"3aa6aa03ed1b1cb3a9396ac83d44121eb3ecaa6fd2591dc295953c1919948281"},"schema_version":"1.0"},"canonical_sha256":"d52441ae95d9c91c47124e1ad1f58086f5026a5b655669e219cf68a3d376ee6a","source":{"kind":"arxiv","id":"2608.05695","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05695","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05695v1","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05695","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"pith_short_12","alias_value":"2USEDLUV3HER","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"pith_short_16","alias_value":"2USEDLUV3HERYRYS","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"pith_short_8","alias_value":"2USEDLUV","created_at":"2026-08-07T00:52:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:2USEDLUV3HERYRYSJYNND5MAQ3","target":"record","payload":{"canonical_record":{"source":{"id":"2608.05695","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-06T07:37:49Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"883fd3b8d7730d217ae7ac55c854f8cb2bad007e8a3f8531fde5c16a6b5a06be","abstract_canon_sha256":"3aa6aa03ed1b1cb3a9396ac83d44121eb3ecaa6fd2591dc295953c1919948281"},"schema_version":"1.0"},"canonical_sha256":"d52441ae95d9c91c47124e1ad1f58086f5026a5b655669e219cf68a3d376ee6a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-07T00:52:22.178634Z","signature_b64":"aPIKrnYR7CQk05dPLZ3I1CYpndp6lH1YBcj832OtHYRP8PoDWN4hUR5Omi3f1V2qV6mFmINZpUZ/aCDBUSRLBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d52441ae95d9c91c47124e1ad1f58086f5026a5b655669e219cf68a3d376ee6a","last_reissued_at":"2026-08-07T00:52:22.177238Z","signature_status":"signed_v1","first_computed_at":"2026-08-07T00:52:22.177238Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.05695","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:52:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uKEio7mu3LnGVkgUpKDFT86XqiM7US6OutSjFMVWsqOfRbBWyJATvEo1C18jp5JxqZS8Ye/nKR4UEhwsj0yhDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T13:22:01.327472Z"},"content_sha256":"c917c4aa6edda8f267f03e3839a8f2ab1ceb61cd71ca649f61a848faed7f8ea2","schema_version":"1.0","event_id":"sha256:c917c4aa6edda8f267f03e3839a8f2ab1ceb61cd71ca649f61a848faed7f8ea2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:2USEDLUV3HERYRYSJYNND5MAQ3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.AI","authors_text":"Chenyu Yu, Chunming Wu, Lei Xue, Letian Sha, Le Yu, Sicong Cao, Wenhao Lin, Xiang Chen, Xingwei Lin","submitted_at":"2026-08-06T07:37:49Z","abstract_excerpt":"As large language model (LLM) agents increasingly invoke external tools and interact with real-world systems, unsafe actions may cause irreversible consequences on external states, user data, and downstream services. Recent runtime guardrails mitigate such risks by checking proposed actions before execution, but many remain reactive: they primarily assess the apparent safety of the current action, lacking an explicit model of how risk evolves across the trajectory. This limitation creates a critical blind spot for long-horizon risks, where individually benign-looking actions can gradually drif"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05695","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.05695/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:52:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z8wjJ/ZNcOwjmhaKvaE6ay+IHZL6JUTshFjZY1Cve27iWMEXOw7PTPjqUBGqyYFFRyRjlW9mfjuhfmVPO5mfDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T13:22:01.328063Z"},"content_sha256":"e8ab0ee6115028cd6841f4b88f77aa6e7cf408a68db98ec93d0ac7f7a14ad1a8","schema_version":"1.0","event_id":"sha256:e8ab0ee6115028cd6841f4b88f77aa6e7cf408a68db98ec93d0ac7f7a14ad1a8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2USEDLUV3HERYRYSJYNND5MAQ3/bundle.json","state_url":"https://pith.science/pith/2USEDLUV3HERYRYSJYNND5MAQ3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2USEDLUV3HERYRYSJYNND5MAQ3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T13:22:01Z","links":{"resolver":"https://pith.science/pith/2USEDLUV3HERYRYSJYNND5MAQ3","bundle":"https://pith.science/pith/2USEDLUV3HERYRYSJYNND5MAQ3/bundle.json","state":"https://pith.science/pith/2USEDLUV3HERYRYSJYNND5MAQ3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2USEDLUV3HERYRYSJYNND5MAQ3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:2USEDLUV3HERYRYSJYNND5MAQ3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3aa6aa03ed1b1cb3a9396ac83d44121eb3ecaa6fd2591dc295953c1919948281","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-06T07:37:49Z","title_canon_sha256":"883fd3b8d7730d217ae7ac55c854f8cb2bad007e8a3f8531fde5c16a6b5a06be"},"schema_version":"1.0","source":{"id":"2608.05695","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05695","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05695v1","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05695","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"pith_short_12","alias_value":"2USEDLUV3HER","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"pith_short_16","alias_value":"2USEDLUV3HERYRYS","created_at":"2026-08-07T00:52:22Z"},{"alias_kind":"pith_short_8","alias_value":"2USEDLUV","created_at":"2026-08-07T00:52:22Z"}],"graph_snapshots":[{"event_id":"sha256:e8ab0ee6115028cd6841f4b88f77aa6e7cf408a68db98ec93d0ac7f7a14ad1a8","target":"graph","created_at":"2026-08-07T00:52:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.05695/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As large language model (LLM) agents increasingly invoke external tools and interact with real-world systems, unsafe actions may cause irreversible consequences on external states, user data, and downstream services. Recent runtime guardrails mitigate such risks by checking proposed actions before execution, but many remain reactive: they primarily assess the apparent safety of the current action, lacking an explicit model of how risk evolves across the trajectory. This limitation creates a critical blind spot for long-horizon risks, where individually benign-looking actions can gradually drif","authors_text":"Chenyu Yu, Chunming Wu, Lei Xue, Letian Sha, Le Yu, Sicong Cao, Wenhao Lin, Xiang Chen, Xingwei Lin","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-06T07:37:49Z","title":"DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05695","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c917c4aa6edda8f267f03e3839a8f2ab1ceb61cd71ca649f61a848faed7f8ea2","target":"record","created_at":"2026-08-07T00:52:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3aa6aa03ed1b1cb3a9396ac83d44121eb3ecaa6fd2591dc295953c1919948281","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-06T07:37:49Z","title_canon_sha256":"883fd3b8d7730d217ae7ac55c854f8cb2bad007e8a3f8531fde5c16a6b5a06be"},"schema_version":"1.0","source":{"id":"2608.05695","kind":"arxiv","version":1}},"canonical_sha256":"d52441ae95d9c91c47124e1ad1f58086f5026a5b655669e219cf68a3d376ee6a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d52441ae95d9c91c47124e1ad1f58086f5026a5b655669e219cf68a3d376ee6a","first_computed_at":"2026-08-07T00:52:22.177238Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-07T00:52:22.177238Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aPIKrnYR7CQk05dPLZ3I1CYpndp6lH1YBcj832OtHYRP8PoDWN4hUR5Omi3f1V2qV6mFmINZpUZ/aCDBUSRLBg==","signature_status":"signed_v1","signed_at":"2026-08-07T00:52:22.178634Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.05695","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c917c4aa6edda8f267f03e3839a8f2ab1ceb61cd71ca649f61a848faed7f8ea2","sha256:e8ab0ee6115028cd6841f4b88f77aa6e7cf408a68db98ec93d0ac7f7a14ad1a8"],"state_sha256":"c22e27fb87c0ffa9bb9a6d8765720730e96c1f4be13037f654c72b90b5146b53"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VvV7cCmmDtwFGJXb95L6G63UPsiLscXSD9MwFNsIY48M47XC8w5gDyoKVevrjGOdEBKbjTQiaiZXIyUH4VvHCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T13:22:01.333560Z","bundle_sha256":"8ae58c10c576bed9c4e26f7481c6e4f03308308baf1d3b8d40c7dc6c3772cf7e"}}