{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5FJU5S24FKVU44W6MEOMVXZX3R","short_pith_number":"pith:5FJU5S24","canonical_record":{"source":{"id":"2608.03009","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T01:42:43Z","cross_cats_sorted":[],"title_canon_sha256":"421f060f2f10ef95eb16a0f80c654dc814d7d4f01f081bdaeee4cae436b967c9","abstract_canon_sha256":"23b18f6a79befef89123df0d1b7fda0449d1c52d8c1e3dd5f79fe2fd47f52ab1"},"schema_version":"1.0"},"canonical_sha256":"e9534ecb5c2aab4e72de611ccadf37dc7fa6d8baa1dd12b164d120d28b0141fe","source":{"kind":"arxiv","id":"2608.03009","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03009","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03009v1","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03009","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"pith_short_12","alias_value":"5FJU5S24FKVU","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"pith_short_16","alias_value":"5FJU5S24FKVU44W6","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"pith_short_8","alias_value":"5FJU5S24","created_at":"2026-08-05T00:44:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5FJU5S24FKVU44W6MEOMVXZX3R","target":"record","payload":{"canonical_record":{"source":{"id":"2608.03009","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T01:42:43Z","cross_cats_sorted":[],"title_canon_sha256":"421f060f2f10ef95eb16a0f80c654dc814d7d4f01f081bdaeee4cae436b967c9","abstract_canon_sha256":"23b18f6a79befef89123df0d1b7fda0449d1c52d8c1e3dd5f79fe2fd47f52ab1"},"schema_version":"1.0"},"canonical_sha256":"e9534ecb5c2aab4e72de611ccadf37dc7fa6d8baa1dd12b164d120d28b0141fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-05T00:44:25.125967Z","signature_b64":"QS5rstqALhL797GXJA4vsYr0mAB4ZBLIQsRUfyX0wlI2OHjQMt4bmLt8LK9o2stlDWYA8ZoY3SAbNJqZDg1uDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e9534ecb5c2aab4e72de611ccadf37dc7fa6d8baa1dd12b164d120d28b0141fe","last_reissued_at":"2026-08-05T00:44:25.123545Z","signature_status":"signed_v1","first_computed_at":"2026-08-05T00:44:25.123545Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.03009","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:44:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hFl+7PImN1H7GtA9lG8w/z6O5sBiZD7dSKHujk549ef2xpVkW+R5415jN/aQwn09HGHnmcXXF3R0pJ9sdIZIDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:48:25.937827Z"},"content_sha256":"15d869dca465212311f003b76bf36972e3985f9a78ffa9f5d120f6e379150ded","schema_version":"1.0","event_id":"sha256:15d869dca465212311f003b76bf36972e3985f9a78ffa9f5d120f6e379150ded"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5FJU5S24FKVU44W6MEOMVXZX3R","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Cameron Berryman, Daniel Graham, Joel Sadler, Suhas Adavelly, Victoria Lovelace, Yuhan You","submitted_at":"2026-08-04T01:42:43Z","abstract_excerpt":"Agentic artificial intelligence raises a new security concern: cyber threats that reason, act, and adapt locally without continuous human direction. We examine this threat through an Agentic Remote Access Trojan (agentic RAT): a Remote Access Trojan augmented with a locally deployed Small Language Model (SLM). The SLM interprets host and network observations, selects actions, recovers from failed steps, and reduces reliance on an external operator. We implement the concept in a controlled, network-isolated lab built from Kali Linux, a Metasploitable2 target, LM Studio, and a local 8-billion-pa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03009","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.03009/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-05T00:44:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6EaPFREoteULBNA0UAXNZ5fedCp2YjEqX3qNKcz7ZLDLoLVNhJ/FmDjILpQf/XgmBwPdTwP0jU6WvqJosCa4CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:48:25.938806Z"},"content_sha256":"57d2da4f68d38d7e51de4dd618c012f083943feb32b9a13bf6fd9b6e6a951de6","schema_version":"1.0","event_id":"sha256:57d2da4f68d38d7e51de4dd618c012f083943feb32b9a13bf6fd9b6e6a951de6"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:5FJU5S24FKVU44W6MEOMVXZX3R","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.1007/978-3-319-06823-7_7) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Sadler, J., Leifer, L.: TeamSense: Prototyping Modular Electronics Sensor Systems for Team Biometrics. In: Plattner, H., Meinel, C., Leifer, L. (eds.) Design Thinking Research, pp. 87–100. Springer, Cham (2015).https://doi.org/10.1007/978-3","arxiv_id":"2608.03009","detector":"doi_compliance","evidence":{"ref_index":32,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.1007/978-3","reconstructed_doi":"10.1007/978-3-319-06823-7_7"},"severity":"advisory","ref_index":32,"audited_at":"2026-08-08T04:28:52.542954Z","event_type":"pith.integrity.v1","detected_doi":"10.1007/978-3-319-06823-7_7","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"2e93de85abf94acfdc485d67450f5205894fbb045f04694b5f6143f344cddb03","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":18618,"payload_sha256":"01aeeae693a455853ed0f9c779c91a0fa13be11f33385b89350a85413f53ea7b","signature_b64":"1Suc009ailHmjB1gXAwToLd26Q8WjAP7VAckvycd4EBai8EvpWQn/92Pv3hjVUnJ03YGnbt3DQjvWeFyo1tbAA==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-08T04:33:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TPQSqtH04VmHqaFuGCFgrcgFXwuewpPN69ys12WGezYB+e4XvQszvlOW8PwfqR3M4EJz/n1rA7Ee4nQN67pIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:48:25.942838Z"},"content_sha256":"f7004c26fce1de0dc949c0ae42b564f87bccc3b5d90fa285d295ed2eb8f0d17f","schema_version":"1.0","event_id":"sha256:f7004c26fce1de0dc949c0ae42b564f87bccc3b5d90fa285d295ed2eb8f0d17f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5FJU5S24FKVU44W6MEOMVXZX3R/bundle.json","state_url":"https://pith.science/pith/5FJU5S24FKVU44W6MEOMVXZX3R/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5FJU5S24FKVU44W6MEOMVXZX3R/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T07:48:25Z","links":{"resolver":"https://pith.science/pith/5FJU5S24FKVU44W6MEOMVXZX3R","bundle":"https://pith.science/pith/5FJU5S24FKVU44W6MEOMVXZX3R/bundle.json","state":"https://pith.science/pith/5FJU5S24FKVU44W6MEOMVXZX3R/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5FJU5S24FKVU44W6MEOMVXZX3R/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5FJU5S24FKVU44W6MEOMVXZX3R","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"23b18f6a79befef89123df0d1b7fda0449d1c52d8c1e3dd5f79fe2fd47f52ab1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T01:42:43Z","title_canon_sha256":"421f060f2f10ef95eb16a0f80c654dc814d7d4f01f081bdaeee4cae436b967c9"},"schema_version":"1.0","source":{"id":"2608.03009","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.03009","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"arxiv_version","alias_value":"2608.03009v1","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.03009","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"pith_short_12","alias_value":"5FJU5S24FKVU","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"pith_short_16","alias_value":"5FJU5S24FKVU44W6","created_at":"2026-08-05T00:44:25Z"},{"alias_kind":"pith_short_8","alias_value":"5FJU5S24","created_at":"2026-08-05T00:44:25Z"}],"graph_snapshots":[{"event_id":"sha256:57d2da4f68d38d7e51de4dd618c012f083943feb32b9a13bf6fd9b6e6a951de6","target":"graph","created_at":"2026-08-05T00:44:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.03009/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Agentic artificial intelligence raises a new security concern: cyber threats that reason, act, and adapt locally without continuous human direction. We examine this threat through an Agentic Remote Access Trojan (agentic RAT): a Remote Access Trojan augmented with a locally deployed Small Language Model (SLM). The SLM interprets host and network observations, selects actions, recovers from failed steps, and reduces reliance on an external operator. We implement the concept in a controlled, network-isolated lab built from Kali Linux, a Metasploitable2 target, LM Studio, and a local 8-billion-pa","authors_text":"Cameron Berryman, Daniel Graham, Joel Sadler, Suhas Adavelly, Victoria Lovelace, Yuhan You","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T01:42:43Z","title":"Tiny Enough to Break In: Agentic Remote Access Trojans Powered by Small Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.03009","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:15d869dca465212311f003b76bf36972e3985f9a78ffa9f5d120f6e379150ded","target":"record","created_at":"2026-08-05T00:44:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"23b18f6a79befef89123df0d1b7fda0449d1c52d8c1e3dd5f79fe2fd47f52ab1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-04T01:42:43Z","title_canon_sha256":"421f060f2f10ef95eb16a0f80c654dc814d7d4f01f081bdaeee4cae436b967c9"},"schema_version":"1.0","source":{"id":"2608.03009","kind":"arxiv","version":1}},"canonical_sha256":"e9534ecb5c2aab4e72de611ccadf37dc7fa6d8baa1dd12b164d120d28b0141fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e9534ecb5c2aab4e72de611ccadf37dc7fa6d8baa1dd12b164d120d28b0141fe","first_computed_at":"2026-08-05T00:44:25.123545Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-05T00:44:25.123545Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QS5rstqALhL797GXJA4vsYr0mAB4ZBLIQsRUfyX0wlI2OHjQMt4bmLt8LK9o2stlDWYA8ZoY3SAbNJqZDg1uDA==","signature_status":"signed_v1","signed_at":"2026-08-05T00:44:25.125967Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.03009","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:15d869dca465212311f003b76bf36972e3985f9a78ffa9f5d120f6e379150ded","sha256:57d2da4f68d38d7e51de4dd618c012f083943feb32b9a13bf6fd9b6e6a951de6","sha256:f7004c26fce1de0dc949c0ae42b564f87bccc3b5d90fa285d295ed2eb8f0d17f"],"state_sha256":"a1f8344d2d2bc57564f286053993b0aab78f5cdb28587042da45563538f2ef62"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E0mUIEN9iGGP1oJJdWkY3o0ujsevP5HkUW8b/oFqQS6bJmFKU8e/g607EY+X50EVJ2A/YfIw+fWjGKgp1rjhCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T07:48:25.947129Z","bundle_sha256":"ce71182dcffaf0354554e2e887be3565738adf3f47c2ce5e750d430333db985b"}}