{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3NHKS4JZFTSVULOC563DCQGOW2","short_pith_number":"pith:3NHKS4JZ","canonical_record":{"source":{"id":"2504.07467","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-10T05:35:21Z","cross_cats_sorted":[],"title_canon_sha256":"1012901b4f885cf69d1a693e0775e760e80e27e1217b551b9504ccee1e188472","abstract_canon_sha256":"2650d2f4557e80084dbc806c32a2adeec7070bbd2925abf20e9a62b43d87d350"},"schema_version":"1.0"},"canonical_sha256":"db4ea971392ce55a2dc2efb63140ceb6912837557d557c8ef2e8c6c370fd6990","source":{"kind":"arxiv","id":"2504.07467","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.07467","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"arxiv_version","alias_value":"2504.07467v1","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.07467","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"pith_short_12","alias_value":"3NHKS4JZFTSV","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"pith_short_16","alias_value":"3NHKS4JZFTSVULOC","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"pith_short_8","alias_value":"3NHKS4JZ","created_at":"2026-07-05T10:47:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3NHKS4JZFTSVULOC563DCQGOW2","target":"record","payload":{"canonical_record":{"source":{"id":"2504.07467","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-10T05:35:21Z","cross_cats_sorted":[],"title_canon_sha256":"1012901b4f885cf69d1a693e0775e760e80e27e1217b551b9504ccee1e188472","abstract_canon_sha256":"2650d2f4557e80084dbc806c32a2adeec7070bbd2925abf20e9a62b43d87d350"},"schema_version":"1.0"},"canonical_sha256":"db4ea971392ce55a2dc2efb63140ceb6912837557d557c8ef2e8c6c370fd6990","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:47:09.479870Z","signature_b64":"+bdyZjxmCXSXJdfXTWhjaTUyJyLlD+8+y/7zAeKTQ5G8AxFggPAPqWCs5GQMYjIcM1iqze0nh1KjGxI2fHdpBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"db4ea971392ce55a2dc2efb63140ceb6912837557d557c8ef2e8c6c370fd6990","last_reissued_at":"2026-07-05T10:47:09.479376Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:47:09.479376Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.07467","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:47:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fGo9I4FnSqvqJ4ww2fIZ92QEu9l6F/KjMs2VMm61K32ih+Jwn8VYdPbBWLlMqLIyYS3mwsfN6xdrXawBSQ3bDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T05:55:22.122276Z"},"content_sha256":"fcb5445fae0ec96002d6442869162133f62a964843f0d7061128d6c6a5761b97","schema_version":"1.0","event_id":"sha256:fcb5445fae0ec96002d6442869162133f62a964843f0d7061128d6c6a5761b97"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3NHKS4JZFTSVULOC563DCQGOW2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defense against Prompt Injection Attacks via Mixture of Encodings","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"David Sullivan, Kyle Jackson, Mei Chen, Pengtao Xie, Ruiyi Zhang","submitted_at":"2025-04-10T05:35:21Z","abstract_excerpt":"Large Language Models (LLMs) have emerged as a dominant approach for a wide range of NLP tasks, with their access to external information further enhancing their capabilities. However, this introduces new vulnerabilities, known as prompt injection attacks, where external content embeds malicious instructions that manipulate the LLM's output. Recently, the Base64 defense has been recognized as one of the most effective methods for reducing success rate of prompt injection attacks. Despite its efficacy, this method can degrade LLM performance on certain NLP tasks. To address this challenge, we p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.07467","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.07467/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:47:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xbCu0AQ6clace8vELe526v5Q1n+azFDed45C8DFDOXAvGs5qS9WjcnxGUJEw/qlW60HmZvavXGhoMQp9y/uwBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T05:55:22.122663Z"},"content_sha256":"f6ae8a3e4107824a8ef083bbe9d3dbbba4560e4d26ebdc7ecae6dad112faa7a3","schema_version":"1.0","event_id":"sha256:f6ae8a3e4107824a8ef083bbe9d3dbbba4560e4d26ebdc7ecae6dad112faa7a3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3NHKS4JZFTSVULOC563DCQGOW2/bundle.json","state_url":"https://pith.science/pith/3NHKS4JZFTSVULOC563DCQGOW2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3NHKS4JZFTSVULOC563DCQGOW2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T05:55:22Z","links":{"resolver":"https://pith.science/pith/3NHKS4JZFTSVULOC563DCQGOW2","bundle":"https://pith.science/pith/3NHKS4JZFTSVULOC563DCQGOW2/bundle.json","state":"https://pith.science/pith/3NHKS4JZFTSVULOC563DCQGOW2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3NHKS4JZFTSVULOC563DCQGOW2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3NHKS4JZFTSVULOC563DCQGOW2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2650d2f4557e80084dbc806c32a2adeec7070bbd2925abf20e9a62b43d87d350","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-10T05:35:21Z","title_canon_sha256":"1012901b4f885cf69d1a693e0775e760e80e27e1217b551b9504ccee1e188472"},"schema_version":"1.0","source":{"id":"2504.07467","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.07467","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"arxiv_version","alias_value":"2504.07467v1","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.07467","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"pith_short_12","alias_value":"3NHKS4JZFTSV","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"pith_short_16","alias_value":"3NHKS4JZFTSVULOC","created_at":"2026-07-05T10:47:09Z"},{"alias_kind":"pith_short_8","alias_value":"3NHKS4JZ","created_at":"2026-07-05T10:47:09Z"}],"graph_snapshots":[{"event_id":"sha256:f6ae8a3e4107824a8ef083bbe9d3dbbba4560e4d26ebdc7ecae6dad112faa7a3","target":"graph","created_at":"2026-07-05T10:47:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.07467/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have emerged as a dominant approach for a wide range of NLP tasks, with their access to external information further enhancing their capabilities. However, this introduces new vulnerabilities, known as prompt injection attacks, where external content embeds malicious instructions that manipulate the LLM's output. Recently, the Base64 defense has been recognized as one of the most effective methods for reducing success rate of prompt injection attacks. Despite its efficacy, this method can degrade LLM performance on certain NLP tasks. To address this challenge, we p","authors_text":"David Sullivan, Kyle Jackson, Mei Chen, Pengtao Xie, Ruiyi Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-10T05:35:21Z","title":"Defense against Prompt Injection Attacks via Mixture of Encodings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.07467","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fcb5445fae0ec96002d6442869162133f62a964843f0d7061128d6c6a5761b97","target":"record","created_at":"2026-07-05T10:47:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2650d2f4557e80084dbc806c32a2adeec7070bbd2925abf20e9a62b43d87d350","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-04-10T05:35:21Z","title_canon_sha256":"1012901b4f885cf69d1a693e0775e760e80e27e1217b551b9504ccee1e188472"},"schema_version":"1.0","source":{"id":"2504.07467","kind":"arxiv","version":1}},"canonical_sha256":"db4ea971392ce55a2dc2efb63140ceb6912837557d557c8ef2e8c6c370fd6990","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"db4ea971392ce55a2dc2efb63140ceb6912837557d557c8ef2e8c6c370fd6990","first_computed_at":"2026-07-05T10:47:09.479376Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:47:09.479376Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+bdyZjxmCXSXJdfXTWhjaTUyJyLlD+8+y/7zAeKTQ5G8AxFggPAPqWCs5GQMYjIcM1iqze0nh1KjGxI2fHdpBg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:47:09.479870Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.07467","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fcb5445fae0ec96002d6442869162133f62a964843f0d7061128d6c6a5761b97","sha256:f6ae8a3e4107824a8ef083bbe9d3dbbba4560e4d26ebdc7ecae6dad112faa7a3"],"state_sha256":"00d0de0c56ce5a051c5d75d6c5275cf6a7fd98c939b1592f853aec4e6655c55e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/M1b+vbqib095aFn+igFrwucbqNM2kIUJxW5zGH7NMzxmC6VaJc7yc3BMFxfoUgXlJAHyTNBS674Gq34Z+pWDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T05:55:22.126480Z","bundle_sha256":"383b0210ade0f2a2cd12750d605de24b5821fc0cac4ee2ea6da0d325d12f6991"}}