{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:6H3TGPIYOOSKAJUDPULZD54PMS","short_pith_number":"pith:6H3TGPIY","canonical_record":{"source":{"id":"2605.16035","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T15:10:33Z","cross_cats_sorted":["cs.AI","cs.MA"],"title_canon_sha256":"1a6e93c8477bbf610df089e354133651bbcb264ee17c039a5409ba37d1830b1e","abstract_canon_sha256":"9da9b71336a44f9d96c11a15a84954e2705440c84b75593f5e18a9cebb345beb"},"schema_version":"1.0"},"canonical_sha256":"f1f7333d1873a4a026837d1791f78f6489c2077a4669b356f8609ed055373f79","source":{"kind":"arxiv","id":"2605.16035","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.16035","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"arxiv_version","alias_value":"2605.16035v1","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.16035","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"pith_short_12","alias_value":"6H3TGPIYOOSK","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"pith_short_16","alias_value":"6H3TGPIYOOSKAJUD","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"pith_short_8","alias_value":"6H3TGPIY","created_at":"2026-05-20T00:01:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:6H3TGPIYOOSKAJUDPULZD54PMS","target":"record","payload":{"canonical_record":{"source":{"id":"2605.16035","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T15:10:33Z","cross_cats_sorted":["cs.AI","cs.MA"],"title_canon_sha256":"1a6e93c8477bbf610df089e354133651bbcb264ee17c039a5409ba37d1830b1e","abstract_canon_sha256":"9da9b71336a44f9d96c11a15a84954e2705440c84b75593f5e18a9cebb345beb"},"schema_version":"1.0"},"canonical_sha256":"f1f7333d1873a4a026837d1791f78f6489c2077a4669b356f8609ed055373f79","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-20T00:01:50.138981Z","signature_b64":"5pGxP4JX+b914HsEsPtwUmns3hrOTejlDGlBKi/aEwtPstlDVgRc7dxpfTQ2i75d6wlyllz7AcTyK8mDYWJQDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1f7333d1873a4a026837d1791f78f6489c2077a4669b356f8609ed055373f79","last_reissued_at":"2026-05-20T00:01:50.138504Z","signature_status":"signed_v1","first_computed_at":"2026-05-20T00:01:50.138504Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.16035","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T00:01:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gjmSIqkUF32x4pv6qlIVEtjK/UoE96LXUlg3IQexIlYtO3ZF2KFB+TXSHkeXgcQmPk4qdgdopy7oH9ucVl43AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-21T09:25:17.912127Z"},"content_sha256":"b9e30170b97a6606110e8b4c1c703c45cf8879dbed3abf7b0534895c19bb2567","schema_version":"1.0","event_id":"sha256:b9e30170b97a6606110e8b4c1c703c45cf8879dbed3abf7b0534895c19bb2567"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:6H3TGPIYOOSKAJUDPULZD54PMS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Who Owns This Agent? Tracing AI Agents Back to Their Owners","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.MA"],"primary_cat":"cs.CR","authors_text":"Alina Oprea, Doron Jonathan Ben Chayim, Eyal Lenga, Gilad Gressel, Ruben Chocron, Yisroel Mirsky","submitted_at":"2026-05-15T15:10:33Z","abstract_excerpt":"AI agents are increasingly deployed to act autonomously in the world, yet there is still no reliable way to trace a harmful agent back to the account that deployed it. This creates the same accountability gap across both ends of the intent spectrum: benign operators may deploy misconfigured or overbroad agents that cause harm unintentionally, while malicious operators may deliberately weaponize agents for scams, harassment, or cyber attacks. In many cases, these agents are powered by vendor-hosted models, a dependency that holds even for sophisticated adversaries such as state actors conductin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.16035","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.16035/integrity.json","findings":[],"available":true,"detectors_run":[{"name":"ai_meta_artifact","ran_at":"2026-05-19T17:33:41.564014Z","status":"skipped","version":"1.0.0","findings_count":0},{"name":"claim_evidence","ran_at":"2026-05-19T16:41:55.540248Z","status":"completed","version":"1.0.0","findings_count":0}],"snapshot_sha256":"74c286bc8c52c7e6421168fa94c5d5b90e6ae8bd2795801c256d5ff382515323"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-20T00:01:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sLteRCYeq+Ky64Xhd2g8ttnDGkCGJQjPIKnNqFTdzsZBFBHyq/afkbYBLqHBrlAyBvrp1QNdjBTS7KCK6XusAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-21T09:25:17.912849Z"},"content_sha256":"e86c12d6aa49c1b81e99653c40a100c36f7f9ddac82ea48b617c8125164427ab","schema_version":"1.0","event_id":"sha256:e86c12d6aa49c1b81e99653c40a100c36f7f9ddac82ea48b617c8125164427ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6H3TGPIYOOSKAJUDPULZD54PMS/bundle.json","state_url":"https://pith.science/pith/6H3TGPIYOOSKAJUDPULZD54PMS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6H3TGPIYOOSKAJUDPULZD54PMS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-21T09:25:17Z","links":{"resolver":"https://pith.science/pith/6H3TGPIYOOSKAJUDPULZD54PMS","bundle":"https://pith.science/pith/6H3TGPIYOOSKAJUDPULZD54PMS/bundle.json","state":"https://pith.science/pith/6H3TGPIYOOSKAJUDPULZD54PMS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6H3TGPIYOOSKAJUDPULZD54PMS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:6H3TGPIYOOSKAJUDPULZD54PMS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9da9b71336a44f9d96c11a15a84954e2705440c84b75593f5e18a9cebb345beb","cross_cats_sorted":["cs.AI","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T15:10:33Z","title_canon_sha256":"1a6e93c8477bbf610df089e354133651bbcb264ee17c039a5409ba37d1830b1e"},"schema_version":"1.0","source":{"id":"2605.16035","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.16035","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"arxiv_version","alias_value":"2605.16035v1","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.16035","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"pith_short_12","alias_value":"6H3TGPIYOOSK","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"pith_short_16","alias_value":"6H3TGPIYOOSKAJUD","created_at":"2026-05-20T00:01:50Z"},{"alias_kind":"pith_short_8","alias_value":"6H3TGPIY","created_at":"2026-05-20T00:01:50Z"}],"graph_snapshots":[{"event_id":"sha256:e86c12d6aa49c1b81e99653c40a100c36f7f9ddac82ea48b617c8125164427ab","target":"graph","created_at":"2026-05-20T00:01:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[{"findings_count":0,"name":"ai_meta_artifact","ran_at":"2026-05-19T17:33:41.564014Z","status":"skipped","version":"1.0.0"},{"findings_count":0,"name":"claim_evidence","ran_at":"2026-05-19T16:41:55.540248Z","status":"completed","version":"1.0.0"}],"endpoint":"/pith/2605.16035/integrity.json","findings":[],"snapshot_sha256":"74c286bc8c52c7e6421168fa94c5d5b90e6ae8bd2795801c256d5ff382515323","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI agents are increasingly deployed to act autonomously in the world, yet there is still no reliable way to trace a harmful agent back to the account that deployed it. This creates the same accountability gap across both ends of the intent spectrum: benign operators may deploy misconfigured or overbroad agents that cause harm unintentionally, while malicious operators may deliberately weaponize agents for scams, harassment, or cyber attacks. In many cases, these agents are powered by vendor-hosted models, a dependency that holds even for sophisticated adversaries such as state actors conductin","authors_text":"Alina Oprea, Doron Jonathan Ben Chayim, Eyal Lenga, Gilad Gressel, Ruben Chocron, Yisroel Mirsky","cross_cats":["cs.AI","cs.MA"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T15:10:33Z","title":"Who Owns This Agent? Tracing AI Agents Back to Their Owners"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.16035","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b9e30170b97a6606110e8b4c1c703c45cf8879dbed3abf7b0534895c19bb2567","target":"record","created_at":"2026-05-20T00:01:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9da9b71336a44f9d96c11a15a84954e2705440c84b75593f5e18a9cebb345beb","cross_cats_sorted":["cs.AI","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-15T15:10:33Z","title_canon_sha256":"1a6e93c8477bbf610df089e354133651bbcb264ee17c039a5409ba37d1830b1e"},"schema_version":"1.0","source":{"id":"2605.16035","kind":"arxiv","version":1}},"canonical_sha256":"f1f7333d1873a4a026837d1791f78f6489c2077a4669b356f8609ed055373f79","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1f7333d1873a4a026837d1791f78f6489c2077a4669b356f8609ed055373f79","first_computed_at":"2026-05-20T00:01:50.138504Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-20T00:01:50.138504Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5pGxP4JX+b914HsEsPtwUmns3hrOTejlDGlBKi/aEwtPstlDVgRc7dxpfTQ2i75d6wlyllz7AcTyK8mDYWJQDQ==","signature_status":"signed_v1","signed_at":"2026-05-20T00:01:50.138981Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.16035","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b9e30170b97a6606110e8b4c1c703c45cf8879dbed3abf7b0534895c19bb2567","sha256:e86c12d6aa49c1b81e99653c40a100c36f7f9ddac82ea48b617c8125164427ab"],"state_sha256":"3bf3aeeaa018355c6eed2355a2f06f5916eafcb94ff1e6ac7057399890edd906"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z+eF2nzYfd7S1X/2Nc1s70pH/tsbycG9QLa3LgRLTWNZFiwMsaLo1EAdcu9tSFKW0ApGlgwMHFVNoIlXQHOwCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-21T09:25:17.916205Z","bundle_sha256":"939ca3d8584ba59a6e56f5fd41bdc7e90c53511970e5a195bbd4fcb816f8a786"}}