{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5V24RV5HKRMSPBQMO6NJ2OI3TP","short_pith_number":"pith:5V24RV5H","canonical_record":{"source":{"id":"2608.05563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T03:32:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a3de48235c81c7d52be17e95babc8e555eb345b1752956a306ae6d545f32cd85","abstract_canon_sha256":"85d810d4131d8a6941ca933533c78b268bbaadd6f187115d576928c2fa696aed"},"schema_version":"1.0"},"canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","source":{"kind":"arxiv","id":"2608.05563","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05563","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05563v1","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05563","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"pith_short_12","alias_value":"5V24RV5HKRMS","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"pith_short_16","alias_value":"5V24RV5HKRMSPBQM","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"pith_short_8","alias_value":"5V24RV5H","created_at":"2026-08-07T00:49:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5V24RV5HKRMSPBQMO6NJ2OI3TP","target":"record","payload":{"canonical_record":{"source":{"id":"2608.05563","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T03:32:43Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"a3de48235c81c7d52be17e95babc8e555eb345b1752956a306ae6d545f32cd85","abstract_canon_sha256":"85d810d4131d8a6941ca933533c78b268bbaadd6f187115d576928c2fa696aed"},"schema_version":"1.0"},"canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-07T00:49:24.590694Z","signature_b64":"1gSVTfkl/T+YdPiKrzHWH8QHrF/9XjiNfZpy/Ojl9tDzbkMSafL+vG/YlzlcB/m+L/0Neyj+LVfuWd0PnrUoAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","last_reissued_at":"2026-08-07T00:49:24.589300Z","signature_status":"signed_v1","first_computed_at":"2026-08-07T00:49:24.589300Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.05563","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:49:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"taGjnKCOKuJoVFIJcQH4de3lmn3ZawHa+ronJNsv2v8S09LhIY94hXJTi1Q0JGsYFlysDCJW4UC7y0QCll6JCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T14:37:48.370286Z"},"content_sha256":"03d9fcad5154a9ca71ed4ac533ab39838c230abf5c47f1c6657dd2feae3cf5e1","schema_version":"1.0","event_id":"sha256:03d9fcad5154a9ca71ed4ac533ab39838c230abf5c47f1c6657dd2feae3cf5e1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5V24RV5HKRMSPBQMO6NJ2OI3TP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jialuo Chen, Jianan Ma, Jingyi Wang, Lingqi Jiang, Linkang Du, Xiaohu Du, Xinhao Deng, Yunhao Feng, Yuqi Qing, Zhihao Yuan","submitted_at":"2026-08-06T03:32:43Z","abstract_excerpt":"Self-evolving skill (SES) systems distill agent trajectories into persistent skills, allowing untrusted experience to become trusted instruction. We introduce PoisonedEvolution, a trajectory-poisoning attack on this promotion process. Our skill-visible black-box attacker can inspect a target skill and contribute bounded evidence, but cannot observe private pools or evolution logic or edit the skill bank. Artifact poisoning requires Inclusion, Evolution Attribution, and Realization. Attribution is the distinctive bottleneck: the target behavior must appear causally useful, recurrent, and genera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05563","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.05563/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:49:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Al7Hrqb8QfK60nKQxAA+0j+vaMR3UvEABmkA/i2ZEdobvKWnh7Y8DKHOm9qVllYSYptbziDxDNTgMB/rISsRCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T14:37:48.371156Z"},"content_sha256":"502ffc40a01ef6356cc25008eaba23c202cabb79a8ec8de073c65d9614123fc0","schema_version":"1.0","event_id":"sha256:502ffc40a01ef6356cc25008eaba23c202cabb79a8ec8de073c65d9614123fc0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/bundle.json","state_url":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T14:37:48Z","links":{"resolver":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP","bundle":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/bundle.json","state":"https://pith.science/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5V24RV5HKRMSPBQMO6NJ2OI3TP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5V24RV5HKRMSPBQMO6NJ2OI3TP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"85d810d4131d8a6941ca933533c78b268bbaadd6f187115d576928c2fa696aed","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T03:32:43Z","title_canon_sha256":"a3de48235c81c7d52be17e95babc8e555eb345b1752956a306ae6d545f32cd85"},"schema_version":"1.0","source":{"id":"2608.05563","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05563","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05563v1","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05563","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"pith_short_12","alias_value":"5V24RV5HKRMS","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"pith_short_16","alias_value":"5V24RV5HKRMSPBQM","created_at":"2026-08-07T00:49:24Z"},{"alias_kind":"pith_short_8","alias_value":"5V24RV5H","created_at":"2026-08-07T00:49:24Z"}],"graph_snapshots":[{"event_id":"sha256:502ffc40a01ef6356cc25008eaba23c202cabb79a8ec8de073c65d9614123fc0","target":"graph","created_at":"2026-08-07T00:49:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.05563/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Self-evolving skill (SES) systems distill agent trajectories into persistent skills, allowing untrusted experience to become trusted instruction. We introduce PoisonedEvolution, a trajectory-poisoning attack on this promotion process. Our skill-visible black-box attacker can inspect a target skill and contribute bounded evidence, but cannot observe private pools or evolution logic or edit the skill bank. Artifact poisoning requires Inclusion, Evolution Attribution, and Realization. Attribution is the distinctive bottleneck: the target behavior must appear causally useful, recurrent, and genera","authors_text":"Jialuo Chen, Jianan Ma, Jingyi Wang, Lingqi Jiang, Linkang Du, Xiaohu Du, Xinhao Deng, Yunhao Feng, Yuqi Qing, Zhihao Yuan","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T03:32:43Z","title":"When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05563","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:03d9fcad5154a9ca71ed4ac533ab39838c230abf5c47f1c6657dd2feae3cf5e1","target":"record","created_at":"2026-08-07T00:49:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"85d810d4131d8a6941ca933533c78b268bbaadd6f187115d576928c2fa696aed","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-08-06T03:32:43Z","title_canon_sha256":"a3de48235c81c7d52be17e95babc8e555eb345b1752956a306ae6d545f32cd85"},"schema_version":"1.0","source":{"id":"2608.05563","kind":"arxiv","version":1}},"canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed75c8d7a7545927860c779a9d391b9bf57008afc576970d1eacab8d258a70cb","first_computed_at":"2026-08-07T00:49:24.589300Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-07T00:49:24.589300Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1gSVTfkl/T+YdPiKrzHWH8QHrF/9XjiNfZpy/Ojl9tDzbkMSafL+vG/YlzlcB/m+L/0Neyj+LVfuWd0PnrUoAQ==","signature_status":"signed_v1","signed_at":"2026-08-07T00:49:24.590694Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.05563","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:03d9fcad5154a9ca71ed4ac533ab39838c230abf5c47f1c6657dd2feae3cf5e1","sha256:502ffc40a01ef6356cc25008eaba23c202cabb79a8ec8de073c65d9614123fc0"],"state_sha256":"c46090ad58e9d7455a861823c5076edf2dd68bcff414373b517aa5a6265b4832"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Htm2aYN+lp9lQCrLbp2ZDMTWr5cewVF9HLqUhX3FEzpH1oipD5JOcCQKW0B0QpQm96FDM6n/2L11nxdxf+tmCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T14:37:48.403788Z","bundle_sha256":"b9fd8664d19ce34909d4113a50070aad69d5c959f33dd0ed5526f4dad20f6854"}}