{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:7BITF3N774EQTDALYBUWC3BQGJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"06bd1ee1dfdfdc791b0a6398643b26f6f14b276848dbf847bb5309d618b7e229","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:56Z","title_canon_sha256":"8cfd9ec1147122931580fb60f1eaae6998477e425c284715889d39239685c304"},"schema_version":"1.0","source":{"id":"2505.18333","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18333","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18333v1","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18333","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_12","alias_value":"7BITF3N774EQ","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_16","alias_value":"7BITF3N774EQTDAL","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_8","alias_value":"7BITF3N7","created_at":"2026-07-05T11:08:44Z"}],"graph_snapshots":[{"event_id":"sha256:768f62a807edd34d40c79fe1198d51d9f4702fe1a28573ff6ba8d987dde0e62b","target":"graph","created_at":"2026-07-05T11:08:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.18333/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) are vulnerable to prompt injection attacks, and several defenses have recently been proposed, often claiming to mitigate these attacks successfully. However, we argue that existing studies lack a principled approach to evaluating these defenses. In this paper, we argue the need to assess defenses across two critical dimensions: (1) effectiveness, measured against both existing and adaptive prompt injection attacks involving diverse target and injected prompts, and (2) general-purpose utility, ensuring that the defense does not compromise the foundational capabiliti","authors_text":"Dawn Song, Jinyuan Jia, Neil Zhenqiang Gong, Yupei Liu, Yuqi Jia, Zedian Shao","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:56Z","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18333","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a582228a14ac029a87eb56dc8e413789f83b22bd90acaa8c488ce586205a11f4","target":"record","created_at":"2026-07-05T11:08:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"06bd1ee1dfdfdc791b0a6398643b26f6f14b276848dbf847bb5309d618b7e229","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:56Z","title_canon_sha256":"8cfd9ec1147122931580fb60f1eaae6998477e425c284715889d39239685c304"},"schema_version":"1.0","source":{"id":"2505.18333","kind":"arxiv","version":1}},"canonical_sha256":"f85132edbfff09098c0bc069616c303262b37f362c1c07700783b395a4385e08","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f85132edbfff09098c0bc069616c303262b37f362c1c07700783b395a4385e08","first_computed_at":"2026-07-05T11:08:44.982757Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:08:44.982757Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PyC/ovzMOIo/ahdzBGxf1oW0pcisH9GNbsvmDXT+tDm2K1Nr0bcj1fY9zIhjkCQ2WjUsgk5DKzaEjMi7v2I+Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:08:44.983186Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.18333","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a582228a14ac029a87eb56dc8e413789f83b22bd90acaa8c488ce586205a11f4","sha256:768f62a807edd34d40c79fe1198d51d9f4702fe1a28573ff6ba8d987dde0e62b"],"state_sha256":"dcb0541084ce414cb5eaa0f577822e0616a840092ef7ea250074c2faa03934c5"}