{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:35W7KVHQHXAJG5MAHZY7CVURST","short_pith_number":"pith:35W7KVHQ","canonical_record":{"source":{"id":"2608.03844","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T15:50:26Z","cross_cats_sorted":[],"title_canon_sha256":"78f4875de333725269fc3b592d539d2868a9ceb404abd9d3600db8baea40b6b5","abstract_canon_sha256":"e45d5a1723d50c94915bd9acee6f078d92c8cf1ed45c9c1db3cf9b61d4413582"},"schema_version":"1.0"},"canonical_sha256":"df6df554f03dc09375803e71f1569194e575ff8e07a8d9eefa5e070440f6d093","source":{"kind":"arxiv","id":"2608.03844","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03844","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03844v1","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03844","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"pith_short_12","alias_value":"35W7KVHQHXAJ","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"pith_short_16","alias_value":"35W7KVHQHXAJG5MA","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"pith_short_8","alias_value":"35W7KVHQ","created_at":"2026-08-05T01:37:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:35W7KVHQHXAJG5MAHZY7CVURST","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03844","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T15:50:26Z","cross_cats_sorted":[],"title_canon_sha256":"78f4875de333725269fc3b592d539d2868a9ceb404abd9d3600db8baea40b6b5","abstract_canon_sha256":"e45d5a1723d50c94915bd9acee6f078d92c8cf1ed45c9c1db3cf9b61d4413582"},"schema_version":"1.0"},"canonical_sha256":"df6df554f03dc09375803e71f1569194e575ff8e07a8d9eefa5e070440f6d093","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T01:37:14.598762Z","signature_b64":"/ttIMvR8wT7irbJpw81qjEctym8QuHyJw2akWHKI0R2ykKoJYrhTgNblxgDZKrEx8P52l8Sf5YstRSyAP/L5Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"df6df554f03dc09375803e71f1569194e575ff8e07a8d9eefa5e070440f6d093","last_reissued_at":"2026-08-05T01:37:14.597128Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T01:37:14.597128Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03844","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:37:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2EGR0V9Z6HVe/GvOvnWnVwzcxWC11oA63siswvlw6FaLyXgOfOI7/3ih7h5FwnvyBzX5pEAwnBVBC7cQbqWZBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:58:29.467270Z"},"content_sha256":"7b8d781a957877ab9b9add690df2e2906f22b126fd1a37fb8a0440f331029729","schema_version":"1.0","event_id":"sha256:7b8d781a957877ab9b9add690df2e2906f22b126fd1a37fb8a0440f331029729"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:35W7KVHQHXAJG5MAHZY7CVURST","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Jiaming Chen, Jun Zhang, Yanping Li, Yisen Gao, Yumeng Zhang, Zifan Liu","submitted_at":"2026-08-04T15:50:26Z","abstract_excerpt":"Memory-augmented LLM agents rely on rich context for long-horizon reasoning and acting, yet their memory modules expose a persistent attack surface for malicious records, making the study of memory poisoning threats imperative. However, existing query-only attacks often fail to remain effective in two realistic and prevalent settings: large-scale benign memory pools and active input auditing. Consequently, current approaches fall short when facing the dual challenges of high retrieval competitiveness and rigorous semantic checks. To overcome these limitations, we propose MAFIA, a query-only Me"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03844","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03844/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:37:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/411a37Bz3vgAFIwGHy8bT7J+iwUAuL0hx/bUg7DRsfuX4GIGIBMrN9qbBv2I+XP5aUzVSZ6DGL+mBt8wgTTDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:58:29.467815Z"},"content_sha256":"06561dd467240c1fd9d999a95c967451f6e5ff9f612f3ab3959f799db9f2bea2","schema_version":"1.0","event_id":"sha256:06561dd467240c1fd9d999a95c967451f6e5ff9f612f3ab3959f799db9f2bea2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/35W7KVHQHXAJG5MAHZY7CVURST/bundle.json","state_url":"https://pith.science/pith/35W7KVHQHXAJG5MAHZY7CVURST/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/35W7KVHQHXAJG5MAHZY7CVURST/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T15:58:29Z","links":{"resolver":"https://pith.science/pith/35W7KVHQHXAJG5MAHZY7CVURST","bundle":"https://pith.science/pith/35W7KVHQHXAJG5MAHZY7CVURST/bundle.json","state":"https://pith.science/pith/35W7KVHQHXAJG5MAHZY7CVURST/state.json","well_known_bundle":"https://pith.science/.well-known/pith/35W7KVHQHXAJG5MAHZY7CVURST/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:35W7KVHQHXAJG5MAHZY7CVURST","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e45d5a1723d50c94915bd9acee6f078d92c8cf1ed45c9c1db3cf9b61d4413582","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T15:50:26Z","title_canon_sha256":"78f4875de333725269fc3b592d539d2868a9ceb404abd9d3600db8baea40b6b5"},"schema_version":"1.0","source":{"id":"2608.03844","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03844","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03844v1","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03844","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"pith_short_12","alias_value":"35W7KVHQHXAJ","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"pith_short_16","alias_value":"35W7KVHQHXAJG5MA","created_at":"2026-08-05T01:37:14Z"},{"alias_kind":"pith_short_8","alias_value":"35W7KVHQ","created_at":"2026-08-05T01:37:14Z"}],"graph_snapshots":[{"event_id":"sha256:06561dd467240c1fd9d999a95c967451f6e5ff9f612f3ab3959f799db9f2bea2","target":"graph","created_at":"2026-08-05T01:37:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03844/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Memory-augmented LLM agents rely on rich context for long-horizon reasoning and acting, yet their memory modules expose a persistent attack surface for malicious records, making the study of memory poisoning threats imperative. However, existing query-only attacks often fail to remain effective in two realistic and prevalent settings: large-scale benign memory pools and active input auditing. Consequently, current approaches fall short when facing the dual challenges of high retrieval competitiveness and rigorous semantic checks. To overcome these limitations, we propose MAFIA, a query-only Me","authors_text":"Jiaming Chen, Jun Zhang, Yanping Li, Yisen Gao, Yumeng Zhang, Zifan Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T15:50:26Z","title":"MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03844","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7b8d781a957877ab9b9add690df2e2906f22b126fd1a37fb8a0440f331029729","target":"record","created_at":"2026-08-05T01:37:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e45d5a1723d50c94915bd9acee6f078d92c8cf1ed45c9c1db3cf9b61d4413582","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-04T15:50:26Z","title_canon_sha256":"78f4875de333725269fc3b592d539d2868a9ceb404abd9d3600db8baea40b6b5"},"schema_version":"1.0","source":{"id":"2608.03844","kind":"arxiv","version":1}},"canonical_sha256":"df6df554f03dc09375803e71f1569194e575ff8e07a8d9eefa5e070440f6d093","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"df6df554f03dc09375803e71f1569194e575ff8e07a8d9eefa5e070440f6d093","first_computed_at":"2026-08-05T01:37:14.597128Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T01:37:14.597128Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/ttIMvR8wT7irbJpw81qjEctym8QuHyJw2akWHKI0R2ykKoJYrhTgNblxgDZKrEx8P52l8Sf5YstRSyAP/L5Bw==","signature_status":"signed_v1","signed_at":"2026-08-05T01:37:14.598762Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03844","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7b8d781a957877ab9b9add690df2e2906f22b126fd1a37fb8a0440f331029729","sha256:06561dd467240c1fd9d999a95c967451f6e5ff9f612f3ab3959f799db9f2bea2"],"state_sha256":"d6efc9079b2532b7d81d32f9ebdc1d6bc7c3c964da9194d6d5f90c1a54841ad4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"POmQUZ4UaVu+xympSOa1yZdfK+gJ8BXa9EFxuJZqSiE8/E8HHCmCo1HQFeReVzUMh/1Vf5W2Fjli4YYfb6iaBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T15:58:29.472531Z","bundle_sha256":"46c15675f2aea8bb7a878a928887a137ed1ecde0ad0436fa00c6d3f6c35ff303"}}