{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:43FCCFH5CEMIGLSNNM4N7MH5WC","short_pith_number":"pith:43FCCFH5","canonical_record":{"source":{"id":"2406.06737","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-10T18:57:22Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"d44e79551692fd3533e6ef425bfba5b21aa0f3e85084e33b2f5684999fea7bbd","abstract_canon_sha256":"da03e8e6c15aaeca0bd64e2b11202cc814b869a7c4322473c7b27ded25899e46"},"schema_version":"1.0"},"canonical_sha256":"e6ca2114fd1118832e4d6b38dfb0fdb0bf55068c4d11fa516c1dfd53eef838f9","source":{"kind":"arxiv","id":"2406.06737","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.06737","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"arxiv_version","alias_value":"2406.06737v2","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.06737","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"pith_short_12","alias_value":"43FCCFH5CEMI","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"pith_short_16","alias_value":"43FCCFH5CEMIGLSN","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"pith_short_8","alias_value":"43FCCFH5","created_at":"2026-07-05T09:26:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:43FCCFH5CEMIGLSNNM4N7MH5WC","target":"record","payload":{"canonical_record":{"source":{"id":"2406.06737","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-10T18:57:22Z","cross_cats_sorted":["cs.CL"],"title_canon_sha256":"d44e79551692fd3533e6ef425bfba5b21aa0f3e85084e33b2f5684999fea7bbd","abstract_canon_sha256":"da03e8e6c15aaeca0bd64e2b11202cc814b869a7c4322473c7b27ded25899e46"},"schema_version":"1.0"},"canonical_sha256":"e6ca2114fd1118832e4d6b38dfb0fdb0bf55068c4d11fa516c1dfd53eef838f9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:26:27.979479Z","signature_b64":"qYuFkJXBcQk8N1l/fEeJk/V7t9+86KrsHI47RUFb+s91bIT7KAhk1BBQKmTzb7RRtaTFFfkAoPNOyiZc0aONDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e6ca2114fd1118832e4d6b38dfb0fdb0bf55068c4d11fa516c1dfd53eef838f9","last_reissued_at":"2026-07-05T09:26:27.978994Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:26:27.978994Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.06737","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t5IpSlqAmPj1vp8QyVgNaQy1ZCD2iJDbAz4oUE1uaMVOH4SuLfT7Z/PnNsaGh/mxvSKlH2iQ8ajkg6moeSkbAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T03:20:49.127248Z"},"content_sha256":"84321eaf7455ae10457b09c957e482e1400c23a3ced2d7b47ab3073a7f9edcf6","schema_version":"1.0","event_id":"sha256:84321eaf7455ae10457b09c957e482e1400c23a3ced2d7b47ab3073a7f9edcf6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:43FCCFH5CEMIGLSNNM4N7MH5WC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL"],"primary_cat":"cs.CR","authors_text":"Bhuwan Dhingra, Junlin Wang, Roy Xie, Tianyi Yang","submitted_at":"2024-06-10T18:57:22Z","abstract_excerpt":"With the proliferation of LLM-integrated applications such as GPT-s, millions are deployed, offering valuable services through proprietary instruction prompts. These systems, however, are prone to prompt extraction attacks through meticulously designed queries. To help mitigate this problem, we introduce the Raccoon benchmark which comprehensively evaluates a model's susceptibility to prompt extraction attacks. Our novel evaluation method assesses models under both defenseless and defended scenarios, employing a dual approach to evaluate the effectiveness of existing defenses and the resilienc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.06737","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.06737/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wiDIwhnb4ieTqwoxs165zCyN09JBMl0C7YJLlK9kTWzCCYBy3+D4UIk2Wy+ubM2lYpfbQTFq+j4hFwOU5CqGBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T03:20:49.127737Z"},"content_sha256":"9dbd6bc57ff992dfcee8889f6d510d55aa3b9624b9d86db7275b8dbb05db5c79","schema_version":"1.0","event_id":"sha256:9dbd6bc57ff992dfcee8889f6d510d55aa3b9624b9d86db7275b8dbb05db5c79"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/43FCCFH5CEMIGLSNNM4N7MH5WC/bundle.json","state_url":"https://pith.science/pith/43FCCFH5CEMIGLSNNM4N7MH5WC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/43FCCFH5CEMIGLSNNM4N7MH5WC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T03:20:49Z","links":{"resolver":"https://pith.science/pith/43FCCFH5CEMIGLSNNM4N7MH5WC","bundle":"https://pith.science/pith/43FCCFH5CEMIGLSNNM4N7MH5WC/bundle.json","state":"https://pith.science/pith/43FCCFH5CEMIGLSNNM4N7MH5WC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/43FCCFH5CEMIGLSNNM4N7MH5WC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:43FCCFH5CEMIGLSNNM4N7MH5WC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"da03e8e6c15aaeca0bd64e2b11202cc814b869a7c4322473c7b27ded25899e46","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-10T18:57:22Z","title_canon_sha256":"d44e79551692fd3533e6ef425bfba5b21aa0f3e85084e33b2f5684999fea7bbd"},"schema_version":"1.0","source":{"id":"2406.06737","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.06737","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"arxiv_version","alias_value":"2406.06737v2","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.06737","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"pith_short_12","alias_value":"43FCCFH5CEMI","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"pith_short_16","alias_value":"43FCCFH5CEMIGLSN","created_at":"2026-07-05T09:26:27Z"},{"alias_kind":"pith_short_8","alias_value":"43FCCFH5","created_at":"2026-07-05T09:26:27Z"}],"graph_snapshots":[{"event_id":"sha256:9dbd6bc57ff992dfcee8889f6d510d55aa3b9624b9d86db7275b8dbb05db5c79","target":"graph","created_at":"2026-07-05T09:26:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.06737/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the proliferation of LLM-integrated applications such as GPT-s, millions are deployed, offering valuable services through proprietary instruction prompts. These systems, however, are prone to prompt extraction attacks through meticulously designed queries. To help mitigate this problem, we introduce the Raccoon benchmark which comprehensively evaluates a model's susceptibility to prompt extraction attacks. Our novel evaluation method assesses models under both defenseless and defended scenarios, employing a dual approach to evaluate the effectiveness of existing defenses and the resilienc","authors_text":"Bhuwan Dhingra, Junlin Wang, Roy Xie, Tianyi Yang","cross_cats":["cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-10T18:57:22Z","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.06737","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:84321eaf7455ae10457b09c957e482e1400c23a3ced2d7b47ab3073a7f9edcf6","target":"record","created_at":"2026-07-05T09:26:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"da03e8e6c15aaeca0bd64e2b11202cc814b869a7c4322473c7b27ded25899e46","cross_cats_sorted":["cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-10T18:57:22Z","title_canon_sha256":"d44e79551692fd3533e6ef425bfba5b21aa0f3e85084e33b2f5684999fea7bbd"},"schema_version":"1.0","source":{"id":"2406.06737","kind":"arxiv","version":2}},"canonical_sha256":"e6ca2114fd1118832e4d6b38dfb0fdb0bf55068c4d11fa516c1dfd53eef838f9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e6ca2114fd1118832e4d6b38dfb0fdb0bf55068c4d11fa516c1dfd53eef838f9","first_computed_at":"2026-07-05T09:26:27.978994Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:26:27.978994Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qYuFkJXBcQk8N1l/fEeJk/V7t9+86KrsHI47RUFb+s91bIT7KAhk1BBQKmTzb7RRtaTFFfkAoPNOyiZc0aONDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:26:27.979479Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.06737","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:84321eaf7455ae10457b09c957e482e1400c23a3ced2d7b47ab3073a7f9edcf6","sha256:9dbd6bc57ff992dfcee8889f6d510d55aa3b9624b9d86db7275b8dbb05db5c79"],"state_sha256":"64d081edd9f3906fe3b7b86f5c78ce2a4a5723b5669a4ef94e58a60eaa349412"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VMBmEoTmgBXg0H6ues28+tK7YFWZmY7SDFXvWgy7qNZqwjzsGdYndsN1XEJpaAs8KE4LrlGvi3TC/cfj4QkjAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T03:20:49.131978Z","bundle_sha256":"b38c1d8656c45e1ff10942e8bcb9d53e03ea86994b2a3b0500fccbd476b7164b"}}