{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5SBHA5PBLNUX7A3GXUNBGSGMRD","short_pith_number":"pith:5SBHA5PB","canonical_record":{"source":{"id":"2508.06418","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-08T16:05:27Z","cross_cats_sorted":[],"title_canon_sha256":"b72be44fba61b4d807640f61184ca073f6c5163441e62a8dfa083020b54dfac7","abstract_canon_sha256":"42da830db211005982bbe5c373a053f267284ad9c52102e52e7883ab599646d0"},"schema_version":"1.0"},"canonical_sha256":"ec827075e15b697f8366bd1a1348cc88d8e012fe0c9cc351acbdf86e2f1fd252","source":{"kind":"arxiv","id":"2508.06418","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.06418","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"arxiv_version","alias_value":"2508.06418v1","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.06418","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"pith_short_12","alias_value":"5SBHA5PBLNUX","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"pith_short_16","alias_value":"5SBHA5PBLNUX7A3G","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"pith_short_8","alias_value":"5SBHA5PB","created_at":"2026-07-05T11:50:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5SBHA5PBLNUX7A3GXUNBGSGMRD","target":"record","payload":{"canonical_record":{"source":{"id":"2508.06418","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-08T16:05:27Z","cross_cats_sorted":[],"title_canon_sha256":"b72be44fba61b4d807640f61184ca073f6c5163441e62a8dfa083020b54dfac7","abstract_canon_sha256":"42da830db211005982bbe5c373a053f267284ad9c52102e52e7883ab599646d0"},"schema_version":"1.0"},"canonical_sha256":"ec827075e15b697f8366bd1a1348cc88d8e012fe0c9cc351acbdf86e2f1fd252","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:50:55.946801Z","signature_b64":"NAuhUF9p1RA7Vw39rqt1b69AhZXhiBA3SoY1rsKz4G6U1ReYYvNy3H6BCa1XqSlFpVTV1WIO5mSGpxxQxQqZDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ec827075e15b697f8366bd1a1348cc88d8e012fe0c9cc351acbdf86e2f1fd252","last_reissued_at":"2026-07-05T11:50:55.946299Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:50:55.946299Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.06418","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:50:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"74Pb2GSMrHuJwryUdfWlN3QmPM54Ds+pCYCpayNr/VNWZRJujUDDnHOPUPJdmewdkCu3qjaRXKbUy0jxz9DuBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:54:48.934602Z"},"content_sha256":"9ad7c20a2d9a8e995820d538308362316d74971041619c03f63cabd8f6cc6163","schema_version":"1.0","event_id":"sha256:9ad7c20a2d9a8e995820d538308362316d74971041619c03f63cabd8f6cc6163"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5SBHA5PBLNUX7A3GXUNBGSGMRD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Quantifying Conversation Drift in MCP via Latent Polytope","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Cong Wang, Haoran Shi, Hongwei Yao, Shaopeng Jiao, Shuo Shao, Zhan Qin, Ziqi Peng","submitted_at":"2025-08-08T16:05:27Z","abstract_excerpt":"The Model Context Protocol (MCP) enhances large language models (LLMs) by integrating external tools, enabling dynamic aggregation of real-time data to improve task execution. However, its non-isolated execution context introduces critical security and privacy risks. In particular, adversarially crafted content can induce tool poisoning or indirect prompt injection, leading to conversation hijacking, misinformation propagation, or data exfiltration. Existing defenses, such as rule-based filters or LLM-driven detection, remain inadequate due to their reliance on static signatures, computational"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.06418","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.06418/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:50:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ivD49o9P5LM8z9szK7ebwRS6mr3YNc5aqtB2uOpU6MjJ/do4wLDu2oMYujw0j7eQmP3hLsj/++6pNa6DS0gEDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:54:48.935186Z"},"content_sha256":"76309f7f0743d0e77a275510c72c7c5c57b055e8d87dceecc1a014d8845736cb","schema_version":"1.0","event_id":"sha256:76309f7f0743d0e77a275510c72c7c5c57b055e8d87dceecc1a014d8845736cb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD/bundle.json","state_url":"https://pith.science/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:54:48Z","links":{"resolver":"https://pith.science/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD","bundle":"https://pith.science/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD/bundle.json","state":"https://pith.science/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5SBHA5PBLNUX7A3GXUNBGSGMRD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5SBHA5PBLNUX7A3GXUNBGSGMRD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"42da830db211005982bbe5c373a053f267284ad9c52102e52e7883ab599646d0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-08T16:05:27Z","title_canon_sha256":"b72be44fba61b4d807640f61184ca073f6c5163441e62a8dfa083020b54dfac7"},"schema_version":"1.0","source":{"id":"2508.06418","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.06418","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"arxiv_version","alias_value":"2508.06418v1","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.06418","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"pith_short_12","alias_value":"5SBHA5PBLNUX","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"pith_short_16","alias_value":"5SBHA5PBLNUX7A3G","created_at":"2026-07-05T11:50:55Z"},{"alias_kind":"pith_short_8","alias_value":"5SBHA5PB","created_at":"2026-07-05T11:50:55Z"}],"graph_snapshots":[{"event_id":"sha256:76309f7f0743d0e77a275510c72c7c5c57b055e8d87dceecc1a014d8845736cb","target":"graph","created_at":"2026-07-05T11:50:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.06418/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Model Context Protocol (MCP) enhances large language models (LLMs) by integrating external tools, enabling dynamic aggregation of real-time data to improve task execution. However, its non-isolated execution context introduces critical security and privacy risks. In particular, adversarially crafted content can induce tool poisoning or indirect prompt injection, leading to conversation hijacking, misinformation propagation, or data exfiltration. Existing defenses, such as rule-based filters or LLM-driven detection, remain inadequate due to their reliance on static signatures, computational","authors_text":"Cong Wang, Haoran Shi, Hongwei Yao, Shaopeng Jiao, Shuo Shao, Zhan Qin, Ziqi Peng","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.06418","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9ad7c20a2d9a8e995820d538308362316d74971041619c03f63cabd8f6cc6163","target":"record","created_at":"2026-07-05T11:50:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"42da830db211005982bbe5c373a053f267284ad9c52102e52e7883ab599646d0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2025-08-08T16:05:27Z","title_canon_sha256":"b72be44fba61b4d807640f61184ca073f6c5163441e62a8dfa083020b54dfac7"},"schema_version":"1.0","source":{"id":"2508.06418","kind":"arxiv","version":1}},"canonical_sha256":"ec827075e15b697f8366bd1a1348cc88d8e012fe0c9cc351acbdf86e2f1fd252","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ec827075e15b697f8366bd1a1348cc88d8e012fe0c9cc351acbdf86e2f1fd252","first_computed_at":"2026-07-05T11:50:55.946299Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:50:55.946299Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NAuhUF9p1RA7Vw39rqt1b69AhZXhiBA3SoY1rsKz4G6U1ReYYvNy3H6BCa1XqSlFpVTV1WIO5mSGpxxQxQqZDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:50:55.946801Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.06418","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9ad7c20a2d9a8e995820d538308362316d74971041619c03f63cabd8f6cc6163","sha256:76309f7f0743d0e77a275510c72c7c5c57b055e8d87dceecc1a014d8845736cb"],"state_sha256":"655dc48652ff7d2aeb028cbb0fae71c7d2a5780285bd5c9620d94aa59a2f9cae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MI2A34oVNf0K/hHDGBrxbzbQmqsLqARVotbUOPLQPkWd5SAeZdZRQC3n9Mx6YpjHtMjyMyK2JwIdh9JUPO3YCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:54:48.940057Z","bundle_sha256":"bd3bc950cd60dfbbce7eea1bf5d33a70a6e55263c50e023e210ad624bffedb90"}}