{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:3JWI5WXJDIGOMCOOXR4HDIK6IG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4218d12fd0174a746b3db7c2abc4c830b809e406245be066a38cd6b9688edc7","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T12:43:47Z","title_canon_sha256":"6398edb109e977f5847ce5b7019a0b38dc164d9de1aa2a654da5e2f79c4a34ca"},"schema_version":"1.0","source":{"id":"2608.03591","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03591","created_at":"2026-08-05T01:36:43Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03591v1","created_at":"2026-08-05T01:36:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03591","created_at":"2026-08-05T01:36:43Z"},{"alias_kind":"pith_short_12","alias_value":"3JWI5WXJDIGO","created_at":"2026-08-05T01:36:43Z"},{"alias_kind":"pith_short_16","alias_value":"3JWI5WXJDIGOMCOO","created_at":"2026-08-05T01:36:43Z"},{"alias_kind":"pith_short_8","alias_value":"3JWI5WXJ","created_at":"2026-08-05T01:36:43Z"}],"graph_snapshots":[{"event_id":"sha256:b75d2671abdef04b17be8e9cd0582dcc0305ee8764ee64b3337411f9f7ed9552","target":"graph","created_at":"2026-08-05T01:36:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03591/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) agents offer a promising approach to attack chain reconstruction by retrieving and interpreting heterogeneous telemetry to infer ordered attacker actions. However, existing benchmarks mainly evaluate final outputs or aggregate accuracy, providing limited insight into how errors arise and propagate across intermediate reasoning stages. We present DiagChain, a diagnostic benchmark for evidence-grounded attack chain reconstruction that enables stage-wise evaluation of LLM agents. DiagChain includes MAIN-69, a suite of 69 scenarios spanning multiple operating systems, ev","authors_text":"Hai Wan, Jiabao Gao, Kai Chang, Tian Qiu, Weixian Deng, Xiaolin Peng, Xibin Zhao, Xuyang Liu, Yibin Han, Zhenwei Zhang, Zhiwei Xu","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T12:43:47Z","title":"DiagChain: A Diagnostic Benchmark for Evaluating LLM Agents on Evidence-Grounded Attack Chain Reconstruction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03591","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5a16f8aeddf019a8598b8ebf35882124e902909593f4e3608d0b659a64a9ec85","target":"record","created_at":"2026-08-05T01:36:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4218d12fd0174a746b3db7c2abc4c830b809e406245be066a38cd6b9688edc7","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T12:43:47Z","title_canon_sha256":"6398edb109e977f5847ce5b7019a0b38dc164d9de1aa2a654da5e2f79c4a34ca"},"schema_version":"1.0","source":{"id":"2608.03591","kind":"arxiv","version":1}},"canonical_sha256":"da6c8edae91a0ce609cebc7871a15e41ac262fd22aa08f04d0ad64184f6792f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"da6c8edae91a0ce609cebc7871a15e41ac262fd22aa08f04d0ad64184f6792f2","first_computed_at":"2026-08-05T01:36:43.073628Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T01:36:43.073628Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uJwyLssO5q12iUTPJtSZ1kDChNxDorFzTFYGDu2fJQAOHtkC60O6ZDSjPIzc3VbXapu1noPnjtssNQW8o214AA==","signature_status":"signed_v1","signed_at":"2026-08-05T01:36:43.075069Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03591","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5a16f8aeddf019a8598b8ebf35882124e902909593f4e3608d0b659a64a9ec85","sha256:b75d2671abdef04b17be8e9cd0582dcc0305ee8764ee64b3337411f9f7ed9552"],"state_sha256":"5f31c9fe3e7bd1271969285ec434a5141001e9f3d93f6958a5de023715807c32"}