{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:62FNKBEMWEMJAZFDBJ5K3CSMZW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"644b240befe9554763e784e75a952d4687980817cb6399649ba9d3264b6ca3bb","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-26T07:08:15Z","title_canon_sha256":"ab0a11f14a46290c9d30fc2b1e5148ab6985279b2456de2228b752a80bc89ec6"},"schema_version":"1.0","source":{"id":"2503.20279","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.20279","created_at":"2026-07-05T11:17:44Z"},{"alias_kind":"arxiv_version","alias_value":"2503.20279v3","created_at":"2026-07-05T11:17:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.20279","created_at":"2026-07-05T11:17:44Z"},{"alias_kind":"pith_short_12","alias_value":"62FNKBEMWEMJ","created_at":"2026-07-05T11:17:44Z"},{"alias_kind":"pith_short_16","alias_value":"62FNKBEMWEMJAZFD","created_at":"2026-07-05T11:17:44Z"},{"alias_kind":"pith_short_8","alias_value":"62FNKBEM","created_at":"2026-07-05T11:17:44Z"}],"graph_snapshots":[{"event_id":"sha256:0ce00ff3e99ec0166cecdd11a21a8f87ed9af344ddda3a2c654f93d2f85656f5","target":"graph","created_at":"2026-07-05T11:17:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.20279/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are increasingly deployed as computer-use agents, autonomously performing tasks within real desktop or web environments. While this evolution greatly expands practical use cases for humans, it also creates serious security exposures. We present SUDO (Screen-based Universal Detox2Tox Offense), a novel attack framework that systematically bypasses refusal-trained safeguards in commercial computer-use agents, such as Claude for Computer Use. The core mechanism, Detox2Tox, transforms harmful requests (that agents initially reject) into seemingly benign requests via det","authors_text":"Ashkan Yousefpour, Haon Park, Jian Kim, Min Song, Sangyoon Yu, Sejin Lee","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-26T07:08:15Z","title":"sudo rm -rf agentic_security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.20279","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21698a325a76560d67cbe02dab14a4b1c76b3484193079fd6c9aa569d68e4b78","target":"record","created_at":"2026-07-05T11:17:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"644b240befe9554763e784e75a952d4687980817cb6399649ba9d3264b6ca3bb","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2025-03-26T07:08:15Z","title_canon_sha256":"ab0a11f14a46290c9d30fc2b1e5148ab6985279b2456de2228b752a80bc89ec6"},"schema_version":"1.0","source":{"id":"2503.20279","kind":"arxiv","version":3}},"canonical_sha256":"f68ad5048cb1189064a30a7aad8a4ccdb409921db7659599dc3028ee2aeafbd8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f68ad5048cb1189064a30a7aad8a4ccdb409921db7659599dc3028ee2aeafbd8","first_computed_at":"2026-07-05T11:17:44.275819Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:17:44.275819Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+l4/uuIBfa1vsEvbEBtN3Z2raRVZGkDsDFlxHrYHVisv+bB0l+uPm/B1oBcOO4M0De+TaHYqpywhQAwjKoC4DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:17:44.276305Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.20279","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21698a325a76560d67cbe02dab14a4b1c76b3484193079fd6c9aa569d68e4b78","sha256:0ce00ff3e99ec0166cecdd11a21a8f87ed9af344ddda3a2c654f93d2f85656f5"],"state_sha256":"095682207b5b6bce903ef586231a946126f34d9e7926dacd900c5a24c9176c4c"}