{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3XTPGSDN6XPDFQ37SBN6DWCYOO","short_pith_number":"pith:3XTPGSDN","canonical_record":{"source":{"id":"2505.00626","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-01T16:06:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"86fcd674b09d62840eaaedeaeb9edce074db729714c7dd909892289ccaf08e04","abstract_canon_sha256":"7ae4e93c48ca4223c2bfeca4b2e37032a7061025fca856d8144f4c3cb00c4976"},"schema_version":"1.0"},"canonical_sha256":"dde6f3486df5de32c37f905be1d858738d5a0e24d9f41cb799902804a1fb4e60","source":{"kind":"arxiv","id":"2505.00626","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.00626","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"arxiv_version","alias_value":"2505.00626v2","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.00626","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"pith_short_12","alias_value":"3XTPGSDN6XPD","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"pith_short_16","alias_value":"3XTPGSDN6XPDFQ37","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"pith_short_8","alias_value":"3XTPGSDN","created_at":"2026-07-05T10:58:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3XTPGSDN6XPDFQ37SBN6DWCYOO","target":"record","payload":{"canonical_record":{"source":{"id":"2505.00626","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-01T16:06:16Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"86fcd674b09d62840eaaedeaeb9edce074db729714c7dd909892289ccaf08e04","abstract_canon_sha256":"7ae4e93c48ca4223c2bfeca4b2e37032a7061025fca856d8144f4c3cb00c4976"},"schema_version":"1.0"},"canonical_sha256":"dde6f3486df5de32c37f905be1d858738d5a0e24d9f41cb799902804a1fb4e60","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:58:27.185879Z","signature_b64":"kaJnmP5IS8GDkF2gWlPrsqkQ2nJJz4rZRCAmAMPwnpZB6iPNgnPTPk77EmDFmz5Ce8gW354VbpDm4J/CFDUxBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dde6f3486df5de32c37f905be1d858738d5a0e24d9f41cb799902804a1fb4e60","last_reissued_at":"2026-07-05T10:58:27.185377Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:58:27.185377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.00626","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:58:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PgNU9fF2te6TjOu7XODoPwdv9ZkqP0cZmWnxdDIEgbSByBh5sSYD0S6iAuSbTyB82RQuu1QcG/sPbZVNWv2xCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:02:24.311624Z"},"content_sha256":"5a8001b1690693312d8ca67e58b25bf4be5d89b73f5bb17734e200c468480e82","schema_version":"1.0","event_id":"sha256:5a8001b1690693312d8ca67e58b25bf4be5d89b73f5bb17734e200c468480e82"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3XTPGSDN6XPDFQ37SBN6DWCYOO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Illusion of Role Separation: Hidden Shortcuts in LLM Role Learning (and How to Fix Them)","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Heqing Huang, Jiahao Yu, Yibo Jiang, Zihao Wang","submitted_at":"2025-05-01T16:06:16Z","abstract_excerpt":"Large language models (LLMs) that integrate multiple input roles (e.g., system instructions, user queries, external tool outputs) are increasingly prevalent in practice. Ensuring that the model accurately distinguishes messages from each role -- a concept we call \\emph{role separation} -- is crucial for consistent multi-role behavior. Although recent work often targets state-of-the-art prompt injection defenses, it remains unclear whether such methods truly teach LLMs to differentiate roles or merely memorize known triggers. In this paper, we examine \\emph{role-separation learning}: the proces"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.00626","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.00626/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:58:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"avCk5OAFQd/TFFWwdGsB0DEn8R7wWBhPmezIBdKnhMBWb1PyBAFpddzD2nCoGfysyZETjoo8YB2mbUZI2vbyCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T08:02:24.317231Z"},"content_sha256":"28290d578019a3957980ec874507165801c07a19d8f2075faaaaa15e10d309ed","schema_version":"1.0","event_id":"sha256:28290d578019a3957980ec874507165801c07a19d8f2075faaaaa15e10d309ed"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO/bundle.json","state_url":"https://pith.science/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T08:02:24Z","links":{"resolver":"https://pith.science/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO","bundle":"https://pith.science/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO/bundle.json","state":"https://pith.science/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3XTPGSDN6XPDFQ37SBN6DWCYOO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3XTPGSDN6XPDFQ37SBN6DWCYOO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7ae4e93c48ca4223c2bfeca4b2e37032a7061025fca856d8144f4c3cb00c4976","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-01T16:06:16Z","title_canon_sha256":"86fcd674b09d62840eaaedeaeb9edce074db729714c7dd909892289ccaf08e04"},"schema_version":"1.0","source":{"id":"2505.00626","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.00626","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"arxiv_version","alias_value":"2505.00626v2","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.00626","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"pith_short_12","alias_value":"3XTPGSDN6XPD","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"pith_short_16","alias_value":"3XTPGSDN6XPDFQ37","created_at":"2026-07-05T10:58:27Z"},{"alias_kind":"pith_short_8","alias_value":"3XTPGSDN","created_at":"2026-07-05T10:58:27Z"}],"graph_snapshots":[{"event_id":"sha256:28290d578019a3957980ec874507165801c07a19d8f2075faaaaa15e10d309ed","target":"graph","created_at":"2026-07-05T10:58:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.00626/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) that integrate multiple input roles (e.g., system instructions, user queries, external tool outputs) are increasingly prevalent in practice. Ensuring that the model accurately distinguishes messages from each role -- a concept we call \\emph{role separation} -- is crucial for consistent multi-role behavior. Although recent work often targets state-of-the-art prompt injection defenses, it remains unclear whether such methods truly teach LLMs to differentiate roles or merely memorize known triggers. In this paper, we examine \\emph{role-separation learning}: the proces","authors_text":"Heqing Huang, Jiahao Yu, Yibo Jiang, Zihao Wang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-01T16:06:16Z","title":"The Illusion of Role Separation: Hidden Shortcuts in LLM Role Learning (and How to Fix Them)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.00626","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5a8001b1690693312d8ca67e58b25bf4be5d89b73f5bb17734e200c468480e82","target":"record","created_at":"2026-07-05T10:58:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7ae4e93c48ca4223c2bfeca4b2e37032a7061025fca856d8144f4c3cb00c4976","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-05-01T16:06:16Z","title_canon_sha256":"86fcd674b09d62840eaaedeaeb9edce074db729714c7dd909892289ccaf08e04"},"schema_version":"1.0","source":{"id":"2505.00626","kind":"arxiv","version":2}},"canonical_sha256":"dde6f3486df5de32c37f905be1d858738d5a0e24d9f41cb799902804a1fb4e60","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dde6f3486df5de32c37f905be1d858738d5a0e24d9f41cb799902804a1fb4e60","first_computed_at":"2026-07-05T10:58:27.185377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:58:27.185377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kaJnmP5IS8GDkF2gWlPrsqkQ2nJJz4rZRCAmAMPwnpZB6iPNgnPTPk77EmDFmz5Ce8gW354VbpDm4J/CFDUxBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:58:27.185879Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.00626","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5a8001b1690693312d8ca67e58b25bf4be5d89b73f5bb17734e200c468480e82","sha256:28290d578019a3957980ec874507165801c07a19d8f2075faaaaa15e10d309ed"],"state_sha256":"a17e71a9465b206fb89b41feaf656b5705a9d749ba97037b31f429cc942750a0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iLj7AiSwmdyYEW9lu6Nb52DHSRxblgcBit5SekfykSYOBK/k7ronJenI0RUlzR8xuai+zUkpf10515AjZoWxBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T08:02:24.322613Z","bundle_sha256":"ec523db0e9dd1f616fb9f2b14cf9e072754d8a5688bc4a261f6fa4c8166348bd"}}