{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5JCUVZ7LC4CKPPPE5KJU2VQQSG","short_pith_number":"pith:5JCUVZ7L","canonical_record":{"source":{"id":"2505.23847","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T18:19:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e36c8603fe040d47805acd150e07de9ebba38586fbb692c39871701fffac5738","abstract_canon_sha256":"2e17c9a94f09fc083be886ee8d5275dd2cc1570d97aa2f7e5a86763428d928e4"},"schema_version":"1.0"},"canonical_sha256":"ea454ae7eb1704a7bde4ea934d561091b9d925aeb0d16df1b0822491e0c8971b","source":{"kind":"arxiv","id":"2505.23847","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23847","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23847v4","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23847","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"pith_short_12","alias_value":"5JCUVZ7LC4CK","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"pith_short_16","alias_value":"5JCUVZ7LC4CKPPPE","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"pith_short_8","alias_value":"5JCUVZ7L","created_at":"2026-06-29T01:14:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5JCUVZ7LC4CKPPPE5KJU2VQQSG","target":"record","payload":{"canonical_record":{"source":{"id":"2505.23847","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T18:19:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e36c8603fe040d47805acd150e07de9ebba38586fbb692c39871701fffac5738","abstract_canon_sha256":"2e17c9a94f09fc083be886ee8d5275dd2cc1570d97aa2f7e5a86763428d928e4"},"schema_version":"1.0"},"canonical_sha256":"ea454ae7eb1704a7bde4ea934d561091b9d925aeb0d16df1b0822491e0c8971b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-29T01:14:02.609660Z","signature_b64":"swyDenPg8ByGZx1CPRuEsQH2Bi7dLovtcz9ZK2uQvlhQjNEIawbntSSF13eJ/RzyVTGkfOxXLUwAyHIakYidCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea454ae7eb1704a7bde4ea934d561091b9d925aeb0d16df1b0822491e0c8971b","last_reissued_at":"2026-06-29T01:14:02.609167Z","signature_status":"signed_v1","first_computed_at":"2026-06-29T01:14:02.609167Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.23847","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-29T01:14:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zEaVSEuDhLOHsTf6HsHY1YK86HdaFutpLg3U0K7AiMcoaGQFc5sRJnasl22yUdiakAah2dehvSydhIBptJkOAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T13:39:17.002270Z"},"content_sha256":"a02e2c67c7e59fc651cb8f5a3df065c11d2533e00d4578749cc63f036876937d","schema_version":"1.0","event_id":"sha256:a02e2c67c7e59fc651cb8f5a3df065c11d2533e00d4578749cc63f036876937d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5JCUVZ7LC4CKPPPE5KJU2VQQSG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Seven Security Challenges That Must be Solved in Cross-domain Multi-agent LLM Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chuan Xiao, Jiseong Jeong, Makoto Onizuka, Ronny Ko, Shuyuan Zheng, Tae-Wan Kim, Won-Yong Shin","submitted_at":"2025-05-28T18:19:03Z","abstract_excerpt":"Large language models (LLMs) are rapidly evolving into autonomous agents that cooperate across organizational boundaries, enabling joint disaster response, supply-chain optimization, and other tasks that demand decentralized expertise without surrendering data ownership. Yet, cross-domain collaboration shatters the unified trust assumptions behind current alignment and containment techniques. An agent benign in isolation may, when receiving messages from an untrusted peer, leak secrets or violate policy, producing risks driven by emergent multi-agent dynamics rather than classical software bug"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23847","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.23847/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-29T01:14:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q1GUPqSMTyPeCUWuj/hoqjDh+EXv4C2Cs7fDZyqylzqp+1hlb92Tf09jbmOgXxzYWreKLewQduXQQ7uEVOplDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T13:39:17.002811Z"},"content_sha256":"0b160a7eadf965c1497b4e6d6f4a9bf52748894ad5dc36a86baae22a8e4ef0c8","schema_version":"1.0","event_id":"sha256:0b160a7eadf965c1497b4e6d6f4a9bf52748894ad5dc36a86baae22a8e4ef0c8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG/bundle.json","state_url":"https://pith.science/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T13:39:17Z","links":{"resolver":"https://pith.science/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG","bundle":"https://pith.science/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG/bundle.json","state":"https://pith.science/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5JCUVZ7LC4CKPPPE5KJU2VQQSG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5JCUVZ7LC4CKPPPE5KJU2VQQSG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e17c9a94f09fc083be886ee8d5275dd2cc1570d97aa2f7e5a86763428d928e4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T18:19:03Z","title_canon_sha256":"e36c8603fe040d47805acd150e07de9ebba38586fbb692c39871701fffac5738"},"schema_version":"1.0","source":{"id":"2505.23847","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23847","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23847v4","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23847","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"pith_short_12","alias_value":"5JCUVZ7LC4CK","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"pith_short_16","alias_value":"5JCUVZ7LC4CKPPPE","created_at":"2026-06-29T01:14:02Z"},{"alias_kind":"pith_short_8","alias_value":"5JCUVZ7L","created_at":"2026-06-29T01:14:02Z"}],"graph_snapshots":[{"event_id":"sha256:0b160a7eadf965c1497b4e6d6f4a9bf52748894ad5dc36a86baae22a8e4ef0c8","target":"graph","created_at":"2026-06-29T01:14:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.23847/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are rapidly evolving into autonomous agents that cooperate across organizational boundaries, enabling joint disaster response, supply-chain optimization, and other tasks that demand decentralized expertise without surrendering data ownership. Yet, cross-domain collaboration shatters the unified trust assumptions behind current alignment and containment techniques. An agent benign in isolation may, when receiving messages from an untrusted peer, leak secrets or violate policy, producing risks driven by emergent multi-agent dynamics rather than classical software bug","authors_text":"Chuan Xiao, Jiseong Jeong, Makoto Onizuka, Ronny Ko, Shuyuan Zheng, Tae-Wan Kim, Won-Yong Shin","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T18:19:03Z","title":"Seven Security Challenges That Must be Solved in Cross-domain Multi-agent LLM Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23847","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a02e2c67c7e59fc651cb8f5a3df065c11d2533e00d4578749cc63f036876937d","target":"record","created_at":"2026-06-29T01:14:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e17c9a94f09fc083be886ee8d5275dd2cc1570d97aa2f7e5a86763428d928e4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-28T18:19:03Z","title_canon_sha256":"e36c8603fe040d47805acd150e07de9ebba38586fbb692c39871701fffac5738"},"schema_version":"1.0","source":{"id":"2505.23847","kind":"arxiv","version":4}},"canonical_sha256":"ea454ae7eb1704a7bde4ea934d561091b9d925aeb0d16df1b0822491e0c8971b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ea454ae7eb1704a7bde4ea934d561091b9d925aeb0d16df1b0822491e0c8971b","first_computed_at":"2026-06-29T01:14:02.609167Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-29T01:14:02.609167Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"swyDenPg8ByGZx1CPRuEsQH2Bi7dLovtcz9ZK2uQvlhQjNEIawbntSSF13eJ/RzyVTGkfOxXLUwAyHIakYidCg==","signature_status":"signed_v1","signed_at":"2026-06-29T01:14:02.609660Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.23847","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a02e2c67c7e59fc651cb8f5a3df065c11d2533e00d4578749cc63f036876937d","sha256:0b160a7eadf965c1497b4e6d6f4a9bf52748894ad5dc36a86baae22a8e4ef0c8"],"state_sha256":"21e268a8e7b01c86f5e0eed5d2a31e638a1b921dfc59cbc7139589320e3ed4d5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8u2FWjojYX/K4Ftl1ePebjMFUVn4HCImgaHEJbstb56j2VWqQP5lnuHluw/qcEbK2w+BSEOty+sRvW71X2xTCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T13:39:17.006599Z","bundle_sha256":"ff68af68805a71f0f4229030e196f399f2edf5ecb67247b4afff844f77ddebc5"}}