{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5CGJPQWISKYRM64W5533ZYL2KO","short_pith_number":"pith:5CGJPQWI","canonical_record":{"source":{"id":"2505.12442","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T14:31:45Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"398f759b3033a54e171e144e957a928138c054edbbcd9971e6a1a456406b1fd2","abstract_canon_sha256":"78120b64863d7dd21f854c7667aba81cf70b9f9d4ca0a106c75132e05ed8f050"},"schema_version":"1.0"},"canonical_sha256":"e88c97c2c892b1167b96ef77bce17a53a713b5cca5311ae0b27bbc839c9b17bd","source":{"kind":"arxiv","id":"2505.12442","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12442","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12442v3","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12442","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"5CGJPQWISKYR","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"5CGJPQWISKYRM64W","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"5CGJPQWI","created_at":"2026-07-05T11:22:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5CGJPQWISKYRM64W5533ZYL2KO","target":"record","payload":{"canonical_record":{"source":{"id":"2505.12442","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T14:31:45Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"398f759b3033a54e171e144e957a928138c054edbbcd9971e6a1a456406b1fd2","abstract_canon_sha256":"78120b64863d7dd21f854c7667aba81cf70b9f9d4ca0a106c75132e05ed8f050"},"schema_version":"1.0"},"canonical_sha256":"e88c97c2c892b1167b96ef77bce17a53a713b5cca5311ae0b27bbc839c9b17bd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:22:40.333654Z","signature_b64":"XJSeSQ+pNZSuXUwiWTykOUM9mXoMQQkr7R5BMIry5Qr6LCoWSSPTKzClI6y4uTLG4A99Bec49cVL25oEn5EuBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e88c97c2c892b1167b96ef77bce17a53a713b5cca5311ae0b27bbc839c9b17bd","last_reissued_at":"2026-07-05T11:22:40.333153Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:22:40.333153Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.12442","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u7jGxqENKemnljHJ09paq5XQEBLFrbf0kKTSIBgF5laAZHoRdP7qNyn9xJ5rJ3Oq5GKZo71WhvxSxgmQdJCDBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:57:07.571174Z"},"content_sha256":"46912986ff876b0ff13493d0884404fd1bbee816a2a4768a9983a4ef055ac6d2","schema_version":"1.0","event_id":"sha256:46912986ff876b0ff13493d0884404fd1bbee816a2a4768a9983a4ef055ac6d2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5CGJPQWISKYRM64W5533ZYL2KO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Daoyuan Wu, Liwen Wang, Shing-Chi Cheung, Shuai Wang, Wenxuan Wang, Zhenlan Ji, Zongjie Li, Zongyi Lyu","submitted_at":"2025-05-18T14:31:45Z","abstract_excerpt":"The rapid advancement of Large Language Models (LLMs) has led to the emergence of Multi-Agent Systems (MAS) to perform complex tasks through collaboration. However, the intricate nature of MAS, including their architecture and agent interactions, raises significant concerns regarding intellectual property (IP) protection. In this paper, we introduce MASLEAK, a novel attack framework designed to extract sensitive information from MAS applications. MASLEAK targets a practical, black-box setting, where the adversary has no prior knowledge of the MAS architecture or agent configurations. The adver"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12442","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.12442/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:22:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uAX5bIN6ZSBNN0dBP6EGKHjx9LuT5kywVUrY2f8L38xIs+1w7+Z26OhiVvDd6GxxmpJa/CctqlvZydTRPsPIAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:57:07.571666Z"},"content_sha256":"be41160cf2a7e97976e3fe07033b88931e167f31edb7b27bbf3f938567415ee4","schema_version":"1.0","event_id":"sha256:be41160cf2a7e97976e3fe07033b88931e167f31edb7b27bbf3f938567415ee4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5CGJPQWISKYRM64W5533ZYL2KO/bundle.json","state_url":"https://pith.science/pith/5CGJPQWISKYRM64W5533ZYL2KO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5CGJPQWISKYRM64W5533ZYL2KO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T21:57:07Z","links":{"resolver":"https://pith.science/pith/5CGJPQWISKYRM64W5533ZYL2KO","bundle":"https://pith.science/pith/5CGJPQWISKYRM64W5533ZYL2KO/bundle.json","state":"https://pith.science/pith/5CGJPQWISKYRM64W5533ZYL2KO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5CGJPQWISKYRM64W5533ZYL2KO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5CGJPQWISKYRM64W5533ZYL2KO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78120b64863d7dd21f854c7667aba81cf70b9f9d4ca0a106c75132e05ed8f050","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T14:31:45Z","title_canon_sha256":"398f759b3033a54e171e144e957a928138c054edbbcd9971e6a1a456406b1fd2"},"schema_version":"1.0","source":{"id":"2505.12442","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12442","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12442v3","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12442","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"pith_short_12","alias_value":"5CGJPQWISKYR","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"pith_short_16","alias_value":"5CGJPQWISKYRM64W","created_at":"2026-07-05T11:22:40Z"},{"alias_kind":"pith_short_8","alias_value":"5CGJPQWI","created_at":"2026-07-05T11:22:40Z"}],"graph_snapshots":[{"event_id":"sha256:be41160cf2a7e97976e3fe07033b88931e167f31edb7b27bbf3f938567415ee4","target":"graph","created_at":"2026-07-05T11:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.12442/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid advancement of Large Language Models (LLMs) has led to the emergence of Multi-Agent Systems (MAS) to perform complex tasks through collaboration. However, the intricate nature of MAS, including their architecture and agent interactions, raises significant concerns regarding intellectual property (IP) protection. In this paper, we introduce MASLEAK, a novel attack framework designed to extract sensitive information from MAS applications. MASLEAK targets a practical, black-box setting, where the adversary has no prior knowledge of the MAS architecture or agent configurations. The adver","authors_text":"Daoyuan Wu, Liwen Wang, Shing-Chi Cheung, Shuai Wang, Wenxuan Wang, Zhenlan Ji, Zongjie Li, Zongyi Lyu","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T14:31:45Z","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12442","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:46912986ff876b0ff13493d0884404fd1bbee816a2a4768a9983a4ef055ac6d2","target":"record","created_at":"2026-07-05T11:22:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78120b64863d7dd21f854c7667aba81cf70b9f9d4ca0a106c75132e05ed8f050","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T14:31:45Z","title_canon_sha256":"398f759b3033a54e171e144e957a928138c054edbbcd9971e6a1a456406b1fd2"},"schema_version":"1.0","source":{"id":"2505.12442","kind":"arxiv","version":3}},"canonical_sha256":"e88c97c2c892b1167b96ef77bce17a53a713b5cca5311ae0b27bbc839c9b17bd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e88c97c2c892b1167b96ef77bce17a53a713b5cca5311ae0b27bbc839c9b17bd","first_computed_at":"2026-07-05T11:22:40.333153Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:22:40.333153Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XJSeSQ+pNZSuXUwiWTykOUM9mXoMQQkr7R5BMIry5Qr6LCoWSSPTKzClI6y4uTLG4A99Bec49cVL25oEn5EuBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:22:40.333654Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.12442","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:46912986ff876b0ff13493d0884404fd1bbee816a2a4768a9983a4ef055ac6d2","sha256:be41160cf2a7e97976e3fe07033b88931e167f31edb7b27bbf3f938567415ee4"],"state_sha256":"edcb9cf0f213646d8db7a1d8a73aabac68f7b575e15007d90e7a36b447d9d092"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GadGJd198IZhBOLWq9DE/Q8jX3b8zD60UI1fjOS+vRrB1lx7bm2qE+pLJBDJDB6veIqi7ZJhRfXQlDELC7J/Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T21:57:07.576047Z","bundle_sha256":"42544106f663200831f959fe88095da2be3fb281ff5bc7e9d549d8f9d140942c"}}