{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3XW7JI4SHSTC35CPSHH4PLENEY","short_pith_number":"pith:3XW7JI4S","canonical_record":{"source":{"id":"2510.12985","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-10-14T20:53:51Z","cross_cats_sorted":[],"title_canon_sha256":"23194418b4297e13cbc7bbe49fcca7ef5e08a1fda1e23350b1df5f1393df0b2a","abstract_canon_sha256":"361fcaaed50ebcf0e6ed8ca7fb57a710e0ef5fdd3e616381b08c0fa3f8e7420f"},"schema_version":"1.0"},"canonical_sha256":"ddedf4a3923ca62df44f91cfc7ac8d261d370c123197c7e08c1d0d9fae0a8744","source":{"kind":"arxiv","id":"2510.12985","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.12985","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"arxiv_version","alias_value":"2510.12985v3","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.12985","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"pith_short_12","alias_value":"3XW7JI4SHSTC","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"pith_short_16","alias_value":"3XW7JI4SHSTC35CP","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"pith_short_8","alias_value":"3XW7JI4S","created_at":"2026-07-22T00:22:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3XW7JI4SHSTC35CPSHH4PLENEY","target":"record","payload":{"canonical_record":{"source":{"id":"2510.12985","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-10-14T20:53:51Z","cross_cats_sorted":[],"title_canon_sha256":"23194418b4297e13cbc7bbe49fcca7ef5e08a1fda1e23350b1df5f1393df0b2a","abstract_canon_sha256":"361fcaaed50ebcf0e6ed8ca7fb57a710e0ef5fdd3e616381b08c0fa3f8e7420f"},"schema_version":"1.0"},"canonical_sha256":"ddedf4a3923ca62df44f91cfc7ac8d261d370c123197c7e08c1d0d9fae0a8744","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-22T00:22:13.390080Z","signature_b64":"+vEiE8E9I/Dm4QfiDMxKTEdmaqu2wT/hWxkMppIEYejCaYpTczJJ86YcNsNKReina9B+AEjRX6CKSyh0/PJSAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ddedf4a3923ca62df44f91cfc7ac8d261d370c123197c7e08c1d0d9fae0a8744","last_reissued_at":"2026-07-22T00:22:13.389180Z","signature_status":"signed_v1","first_computed_at":"2026-07-22T00:22:13.389180Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2510.12985","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-22T00:22:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QheGD0koK7/3krPKpmPZg5rwi0b7BSHKdGWiEWyFiD50v1xUaPG0yGBU8rGVVTUqW3iCVtyAy8FzFSBSa95UAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:30:15.323982Z"},"content_sha256":"183b0fffdec26ae9592d4e38f487771cac073e0b4dcb7813f83e427941ae3c14","schema_version":"1.0","event_id":"sha256:183b0fffdec26ae9592d4e38f487771cac073e0b4dcb7813f83e427941ae3c14"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3XW7JI4SHSTC35CPSHH4PLENEY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Frank Yang, Huajie Shao, Kangrui Wang, Manling Li, Philip Wang, Qineng Wang, Qi Zhu, Ruohan Zhang, Simon Sinong Zhan, Xiangyu Shi, Xinyu Cao, Yao Liu, Yiyan Peng, Zhenyang Ni, Zhian Ruan, Zinan Wang","submitted_at":"2025-10-14T20:53:51Z","abstract_excerpt":"We present SENTINEL, a framework for formally evaluating the physical safety of foundation model (FM)-based embodied agents. SENTINEL is the first to provide multi-level safety evaluation across semantic interpretation, plan generation, and physical execution within a unified formal framework. Unlike prior methods that rely on heuristic rules or subjective FM judgments, SENTINEL grounds practical safety requirements in formal temporal logic (TL) semantics that can precisely specify state invariants, temporal dependencies, and timing constraints. It employs a multi-level verification pipeline w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.12985","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2510.12985/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-22T00:22:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PE+hOmp6jq2eYFRUZO4/XZAs42h2J8XfG/SHFrCvII7dehljn4xwfmVL5uq9NV/+8IV8ioxTZyHxDenZ5WhSAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T08:30:15.324875Z"},"content_sha256":"da9276a8d5833115b7b54f3d507c0ca030939b96985b4a5ffa54f309bfc2e85a","schema_version":"1.0","event_id":"sha256:da9276a8d5833115b7b54f3d507c0ca030939b96985b4a5ffa54f309bfc2e85a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3XW7JI4SHSTC35CPSHH4PLENEY/bundle.json","state_url":"https://pith.science/pith/3XW7JI4SHSTC35CPSHH4PLENEY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3XW7JI4SHSTC35CPSHH4PLENEY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T08:30:15Z","links":{"resolver":"https://pith.science/pith/3XW7JI4SHSTC35CPSHH4PLENEY","bundle":"https://pith.science/pith/3XW7JI4SHSTC35CPSHH4PLENEY/bundle.json","state":"https://pith.science/pith/3XW7JI4SHSTC35CPSHH4PLENEY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3XW7JI4SHSTC35CPSHH4PLENEY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3XW7JI4SHSTC35CPSHH4PLENEY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"361fcaaed50ebcf0e6ed8ca7fb57a710e0ef5fdd3e616381b08c0fa3f8e7420f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-10-14T20:53:51Z","title_canon_sha256":"23194418b4297e13cbc7bbe49fcca7ef5e08a1fda1e23350b1df5f1393df0b2a"},"schema_version":"1.0","source":{"id":"2510.12985","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2510.12985","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"arxiv_version","alias_value":"2510.12985v3","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2510.12985","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"pith_short_12","alias_value":"3XW7JI4SHSTC","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"pith_short_16","alias_value":"3XW7JI4SHSTC35CP","created_at":"2026-07-22T00:22:13Z"},{"alias_kind":"pith_short_8","alias_value":"3XW7JI4S","created_at":"2026-07-22T00:22:13Z"}],"graph_snapshots":[{"event_id":"sha256:da9276a8d5833115b7b54f3d507c0ca030939b96985b4a5ffa54f309bfc2e85a","target":"graph","created_at":"2026-07-22T00:22:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2510.12985/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We present SENTINEL, a framework for formally evaluating the physical safety of foundation model (FM)-based embodied agents. SENTINEL is the first to provide multi-level safety evaluation across semantic interpretation, plan generation, and physical execution within a unified formal framework. Unlike prior methods that rely on heuristic rules or subjective FM judgments, SENTINEL grounds practical safety requirements in formal temporal logic (TL) semantics that can precisely specify state invariants, temporal dependencies, and timing constraints. It employs a multi-level verification pipeline w","authors_text":"Frank Yang, Huajie Shao, Kangrui Wang, Manling Li, Philip Wang, Qineng Wang, Qi Zhu, Ruohan Zhang, Simon Sinong Zhan, Xiangyu Shi, Xinyu Cao, Yao Liu, Yiyan Peng, Zhenyang Ni, Zhian Ruan, Zinan Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-10-14T20:53:51Z","title":"SENTINEL: A Multi-Level Formal Framework for Safety Evaluation of Foundation Model-based Embodied Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2510.12985","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:183b0fffdec26ae9592d4e38f487771cac073e0b4dcb7813f83e427941ae3c14","target":"record","created_at":"2026-07-22T00:22:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"361fcaaed50ebcf0e6ed8ca7fb57a710e0ef5fdd3e616381b08c0fa3f8e7420f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-10-14T20:53:51Z","title_canon_sha256":"23194418b4297e13cbc7bbe49fcca7ef5e08a1fda1e23350b1df5f1393df0b2a"},"schema_version":"1.0","source":{"id":"2510.12985","kind":"arxiv","version":3}},"canonical_sha256":"ddedf4a3923ca62df44f91cfc7ac8d261d370c123197c7e08c1d0d9fae0a8744","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ddedf4a3923ca62df44f91cfc7ac8d261d370c123197c7e08c1d0d9fae0a8744","first_computed_at":"2026-07-22T00:22:13.389180Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-22T00:22:13.389180Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+vEiE8E9I/Dm4QfiDMxKTEdmaqu2wT/hWxkMppIEYejCaYpTczJJ86YcNsNKReina9B+AEjRX6CKSyh0/PJSAA==","signature_status":"signed_v1","signed_at":"2026-07-22T00:22:13.390080Z","signed_message":"canonical_sha256_bytes"},"source_id":"2510.12985","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:183b0fffdec26ae9592d4e38f487771cac073e0b4dcb7813f83e427941ae3c14","sha256:da9276a8d5833115b7b54f3d507c0ca030939b96985b4a5ffa54f309bfc2e85a"],"state_sha256":"0781c95228fd4497c91fe2a0ccbe57bfaf58321c335102af30bdc8599cea0a1f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g5Cc1TQANbNzBwo68qnOCWxX62RWwSamgvPcuTx4TPPuEquQcY7KtzK/Qj0aJnTvM5zgFSSt/byCz4DN+C4WCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T08:30:15.331071Z","bundle_sha256":"d49c349371fb1b00e3fee390bee9e5355668d4cbcb947e55a5c6be76cb46d246"}}