{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:5V24RV5HKRMSPBQMO6NJ2OI3TP","short_pith_number":"pith:5V24RV5H","schema_version":"1.0","canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","source":{"kind":"arxiv","id":"2608.05563","version":1},"attestation_state":"computed","paper":{"title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jialuo Chen, Jianan Ma, Jingyi Wang, Lingqi Jiang, Linkang Du, Xiaohu Du, Xinhao Deng, Yunhao Feng, Yuqi Qing, Zhihao Yuan","submitted_at":"2026-08-06T03:32:43Z","abstract_excerpt":"Self-evolving skill (SES) systems distill agent trajectories into persistent skills, allowing untrusted experience to become trusted instruction. We introduce PoisonedEvolution, a trajectory-poisoning attack on this promotion process. Our skill-visible black-box attacker can inspect a target skill and contribute bounded evidence, but cannot observe private pools or evolution logic or edit the skill bank. Artifact poisoning requires Inclusion, Evolution Attribution, and Realization. Attribution is the distinctive bottleneck: the target behavior must appear causally useful, recurrent, and genera"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2608.05563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T03:32:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a3de48235c81c7d52be17e95babc8e555eb345b1752956a306ae6d545f32cd85","abstract_canon_sha256":"85d810d4131d8a6941ca933533c78b268bbaadd6f187115d576928c2fa696aed"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-07T00:49:24.590694Z","signature_b64":"1gSVTfkl/T+YdPiKrzHWH8QHrF/9XjiNfZpy/Ojl9tDzbkMSafL+vG/YlzlcB/m+L/0Neyj+LVfuWd0PnrUoAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","last_reissued_at":"2026-08-07T00:49:24.589300Z","signature_status":"signed_v1","first_computed_at":"2026-08-07T00:49:24.589300Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jialuo Chen, Jianan Ma, Jingyi Wang, Lingqi Jiang, Linkang Du, Xiaohu Du, Xinhao Deng, Yunhao Feng, Yuqi Qing, Zhihao Yuan","submitted_at":"2026-08-06T03:32:43Z","abstract_excerpt":"Self-evolving skill (SES) systems distill agent trajectories into persistent skills, allowing untrusted experience to become trusted instruction. We introduce PoisonedEvolution, a trajectory-poisoning attack on this promotion process. Our skill-visible black-box attacker can inspect a target skill and contribute bounded evidence, but cannot observe private pools or evolution logic or edit the skill bank. Artifact poisoning requires Inclusion, Evolution Attribution, and Realization. Attribution is the distinctive bottleneck: the target behavior must appear causally useful, recurrent, and genera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05563","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.05563/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2608.05563","created_at":"2026-08-07T00:49:24.590676+00:00"},{"alias_kind":"arxiv_version","alias_value":"2608.05563v1","created_at":"2026-08-07T00:49:24.590676+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05563","created_at":"2026-08-07T00:49:24.590676+00:00"},{"alias_kind":"pith_short_12","alias_value":"5V24RV5HKRMS","created_at":"2026-08-07T00:49:24.590676+00:00"},{"alias_kind":"pith_short_16","alias_value":"5V24RV5HKRMSPBQM","created_at":"2026-08-07T00:49:24.590676+00:00"},{"alias_kind":"pith_short_8","alias_value":"5V24RV5H","created_at":"2026-08-07T00:49:24.590676+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP","json":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP.json","graph_json":"https://pith.science/api/pith-number/5V24RV5HKRMSPBQMO6NJ2OI3TP/graph.json","events_json":"https://pith.science/api/pith-number/5V24RV5HKRMSPBQMO6NJ2OI3TP/events.json","paper":"https://pith.science/paper/5V24RV5H"},"agent_actions":{"view_html":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP","download_json":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP.json","view_paper":"https://pith.science/paper/5V24RV5H","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2608.05563&json=true","fetch_graph":"https://pith.science/api/pith-number/5V24RV5HKRMSPBQMO6NJ2OI3TP/graph.json","fetch_events":"https://pith.science/api/pith-number/5V24RV5HKRMSPBQMO6NJ2OI3TP/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/action/timestamp_anchor","attest_storage":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/action/storage_attestation","attest_author":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/action/author_attestation","sign_citation":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/action/citation_signature","submit_replication":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/action/replication_record"}},"created_at":"2026-08-07T00:49:24.590676+00:00","updated_at":"2026-08-07T00:49:24.590676+00:00"}