{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:3HBKMEAA6BKZ5ONVBFEHLRDZ6O","short_pith_number":"pith:3HBKMEAA","canonical_record":{"source":{"id":"2608.03700","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T14:04:56Z","cross_cats_sorted":["cs.CL","cs.CY"],"title_canon_sha256":"0b272013393878f638fca778b9d184e0fd966b9430f23278768a0b12c7c22eb8","abstract_canon_sha256":"f28b5d18255a32077294ef496ab4daa4a38c3a1e5976e10e82e35585fce12c38"},"schema_version":"1.0"},"canonical_sha256":"d9c2a61000f0559eb9b5094875c479f3a8800b7340b0051c4302afd6b931c3ed","source":{"kind":"arxiv","id":"2608.03700","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03700","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03700v1","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03700","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"pith_short_12","alias_value":"3HBKMEAA6BKZ","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"pith_short_16","alias_value":"3HBKMEAA6BKZ5ONV","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"pith_short_8","alias_value":"3HBKMEAA","created_at":"2026-08-05T01:36:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:3HBKMEAA6BKZ5ONVBFEHLRDZ6O","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03700","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T14:04:56Z","cross_cats_sorted":["cs.CL","cs.CY"],"title_canon_sha256":"0b272013393878f638fca778b9d184e0fd966b9430f23278768a0b12c7c22eb8","abstract_canon_sha256":"f28b5d18255a32077294ef496ab4daa4a38c3a1e5976e10e82e35585fce12c38"},"schema_version":"1.0"},"canonical_sha256":"d9c2a61000f0559eb9b5094875c479f3a8800b7340b0051c4302afd6b931c3ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T01:36:55.309024Z","signature_b64":"/X2uidcralQd7EpDvgqu2qD/Gub3wYQj5iZNpR+KANjJGTzITDiffthfb4Sh/bt8rqV/PX7GHOWIwaV4YXqoBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d9c2a61000f0559eb9b5094875c479f3a8800b7340b0051c4302afd6b931c3ed","last_reissued_at":"2026-08-05T01:36:55.307569Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T01:36:55.307569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03700","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:36:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P/On7hl2690mglaWdlhf92WECCvxZcawsCiY5vxP95jubx5El+sgWd3HvNrEvY8WmewdknH4IFRHRFxN0fewAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:53:28.017331Z"},"content_sha256":"156e528fd32ffcc43f8e7c4359089fcd80c88d3d6b551563040121d801ac8933","schema_version":"1.0","event_id":"sha256:156e528fd32ffcc43f8e7c4359089fcd80c88d3d6b551563040121d801ac8933"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:3HBKMEAA6BKZ5ONVBFEHLRDZ6O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skills","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CY"],"primary_cat":"cs.CR","authors_text":"Bojun Yang, Lei Feng, Miao Xu, Tongliang Liu, Yongli Xiang, Zhifang Zhang, Ziming Hong","submitted_at":"2026-08-04T14:04:56Z","abstract_excerpt":"Persona skills distill personal interaction histories into portable and executable artifacts for downstream agents. While enabling flexible personalization, this process concentrates fragmented personal signals, amplifies their impact through reuse, and challenges defenses designed for individual records or retrieval-based memory. To systematically investigate the safety of the persona-skill pipeline, we introduce AntiSkillBench, an end-to-end benchmark for evaluating risks and defenses across the persona-skill pipeline. It comprises: (i) a dataset of 7,500 persona-grounded dialogue traces, co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03700","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03700/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T01:36:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ai5XWFQd1laLZxaSyevJHaH2szWABulAq8K8R2eEYbi6PoPRXU533YsXuA+am+RQgCf1t0okLtpIKlYtzVG8Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:53:28.017820Z"},"content_sha256":"9f3de1a01ae14488e414fff069ef1813f1d2fcc02d058f3e8724f577da0b5e5c","schema_version":"1.0","event_id":"sha256:9f3de1a01ae14488e414fff069ef1813f1d2fcc02d058f3e8724f577da0b5e5c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O/bundle.json","state_url":"https://pith.science/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T19:53:28Z","links":{"resolver":"https://pith.science/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O","bundle":"https://pith.science/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O/bundle.json","state":"https://pith.science/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3HBKMEAA6BKZ5ONVBFEHLRDZ6O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:3HBKMEAA6BKZ5ONVBFEHLRDZ6O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f28b5d18255a32077294ef496ab4daa4a38c3a1e5976e10e82e35585fce12c38","cross_cats_sorted":["cs.CL","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T14:04:56Z","title_canon_sha256":"0b272013393878f638fca778b9d184e0fd966b9430f23278768a0b12c7c22eb8"},"schema_version":"1.0","source":{"id":"2608.03700","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03700","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03700v1","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03700","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"pith_short_12","alias_value":"3HBKMEAA6BKZ","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"pith_short_16","alias_value":"3HBKMEAA6BKZ5ONV","created_at":"2026-08-05T01:36:55Z"},{"alias_kind":"pith_short_8","alias_value":"3HBKMEAA","created_at":"2026-08-05T01:36:55Z"}],"graph_snapshots":[{"event_id":"sha256:9f3de1a01ae14488e414fff069ef1813f1d2fcc02d058f3e8724f577da0b5e5c","target":"graph","created_at":"2026-08-05T01:36:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03700/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Persona skills distill personal interaction histories into portable and executable artifacts for downstream agents. While enabling flexible personalization, this process concentrates fragmented personal signals, amplifies their impact through reuse, and challenges defenses designed for individual records or retrieval-based memory. To systematically investigate the safety of the persona-skill pipeline, we introduce AntiSkillBench, an end-to-end benchmark for evaluating risks and defenses across the persona-skill pipeline. It comprises: (i) a dataset of 7,500 persona-grounded dialogue traces, co","authors_text":"Bojun Yang, Lei Feng, Miao Xu, Tongliang Liu, Yongli Xiang, Zhifang Zhang, Ziming Hong","cross_cats":["cs.CL","cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T14:04:56Z","title":"When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skills"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03700","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:156e528fd32ffcc43f8e7c4359089fcd80c88d3d6b551563040121d801ac8933","target":"record","created_at":"2026-08-05T01:36:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f28b5d18255a32077294ef496ab4daa4a38c3a1e5976e10e82e35585fce12c38","cross_cats_sorted":["cs.CL","cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T14:04:56Z","title_canon_sha256":"0b272013393878f638fca778b9d184e0fd966b9430f23278768a0b12c7c22eb8"},"schema_version":"1.0","source":{"id":"2608.03700","kind":"arxiv","version":1}},"canonical_sha256":"d9c2a61000f0559eb9b5094875c479f3a8800b7340b0051c4302afd6b931c3ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d9c2a61000f0559eb9b5094875c479f3a8800b7340b0051c4302afd6b931c3ed","first_computed_at":"2026-08-05T01:36:55.307569Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T01:36:55.307569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/X2uidcralQd7EpDvgqu2qD/Gub3wYQj5iZNpR+KANjJGTzITDiffthfb4Sh/bt8rqV/PX7GHOWIwaV4YXqoBQ==","signature_status":"signed_v1","signed_at":"2026-08-05T01:36:55.309024Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03700","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:156e528fd32ffcc43f8e7c4359089fcd80c88d3d6b551563040121d801ac8933","sha256:9f3de1a01ae14488e414fff069ef1813f1d2fcc02d058f3e8724f577da0b5e5c"],"state_sha256":"3c4b90d28141f53b5f8ea9028f4a6de99b03bf0256e3c5f4243d25e199739099"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7qNSyGxh6/zSVGKwTbRPLuwdqKXxLkORD9VYyb8uDGGVk14qm8JEYvJcuY8Ske3Wf7h6rnK6OmPAGSe/HkYcDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T19:53:28.020904Z","bundle_sha256":"8bea29a8ef1ef5b45eb9bbc278351e5ab4729d361e90b30389dc8a46abcc1a5a"}}