{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:7EEUYIYLFWQNINEC3QAWNENZLW","short_pith_number":"pith:7EEUYIYL","canonical_record":{"source":{"id":"2608.01710","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T05:16:02Z","cross_cats_sorted":[],"title_canon_sha256":"3141ef377f8d59ff1c052becbf4e04fb815ed2541b84ef1f1fdbcd7a524e6cbd","abstract_canon_sha256":"35e68b83d26a8b50de5d2687f3f3a0bee6027966e338e8586806d9f3c4c6d078"},"schema_version":"1.0"},"canonical_sha256":"f9094c230b2da0d43482dc016691b95dbc4974fc1aa22bb35fce21e2a8e024a0","source":{"kind":"arxiv","id":"2608.01710","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01710","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01710v1","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01710","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"pith_short_12","alias_value":"7EEUYIYLFWQN","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"pith_short_16","alias_value":"7EEUYIYLFWQNINEC","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"pith_short_8","alias_value":"7EEUYIYL","created_at":"2026-08-04T02:06:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:7EEUYIYLFWQNINEC3QAWNENZLW","target":"record","payload":{"canonical_record":{"source":{"id":"2608.01710","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T05:16:02Z","cross_cats_sorted":[],"title_canon_sha256":"3141ef377f8d59ff1c052becbf4e04fb815ed2541b84ef1f1fdbcd7a524e6cbd","abstract_canon_sha256":"35e68b83d26a8b50de5d2687f3f3a0bee6027966e338e8586806d9f3c4c6d078"},"schema_version":"1.0"},"canonical_sha256":"f9094c230b2da0d43482dc016691b95dbc4974fc1aa22bb35fce21e2a8e024a0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:06:36.328963Z","signature_b64":"3FwuBso+ts2LetRDWaA8+giNnSoHuyWrjGUlGXGFPXsTrEmm/fPb4mzide095mMwU2jr423VV5SdTdpdQ0L1Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f9094c230b2da0d43482dc016691b95dbc4974fc1aa22bb35fce21e2a8e024a0","last_reissued_at":"2026-08-04T02:06:36.327557Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:06:36.327557Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.01710","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:06:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ytu1tnDnHx8yg+pwuzgmc/JKUcmi80lYJypAyNJxEFVufOKbuIWu26T2M2oF1O8T3rIIrqqM7g0IDdQbr1pmCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:00:53.682077Z"},"content_sha256":"2ed7d6bb7039582055b69e1e0b64710deb6f3cdf0248fae30ca379dec2119c1d","schema_version":"1.0","event_id":"sha256:2ed7d6bb7039582055b69e1e0b64710deb6f3cdf0248fae30ca379dec2119c1d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:7EEUYIYLFWQNINEC3QAWNENZLW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond Single-Use Tokens: Durable Authorization State for Replay-Resistant LLM Agent Actions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Hankai Liu, Jinghan Xu, Longze Fan, Xinjin Li, Zeyuan Wang","submitted_at":"2026-08-03T05:16:02Z","abstract_excerpt":"Tool-using large language model agents frequently replan, retry failed operations, delegate tasks, and resume after crashes. These behaviors can cause one user authorization to be requested and executed multiple times under freshly issued token identifiers, even when each individual token is single-use. We call this failure semantic replay: exceeding the execution budget of a token-independent authorization instance rather than merely reusing an old token identifier. We show that identifier-local token consumption cannot prevent fresh reissuance unless the issuer retains monotonic durable stat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01710","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.01710/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-04T02:06:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NXVFtSHxd5LD8ZVmW5+xk4glhnjI4uc1jE7ZAtmHeXwcZA403OZ0HtrWdMWVVX7xdElB6XPEJDuN8Zs24x1fCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:00:53.682598Z"},"content_sha256":"117f14ba71ce6641756373b2984c63af29757387150bd6c7148782f43faf0430","schema_version":"1.0","event_id":"sha256:117f14ba71ce6641756373b2984c63af29757387150bd6c7148782f43faf0430"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7EEUYIYLFWQNINEC3QAWNENZLW/bundle.json","state_url":"https://pith.science/pith/7EEUYIYLFWQNINEC3QAWNENZLW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7EEUYIYLFWQNINEC3QAWNENZLW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T20:00:53Z","links":{"resolver":"https://pith.science/pith/7EEUYIYLFWQNINEC3QAWNENZLW","bundle":"https://pith.science/pith/7EEUYIYLFWQNINEC3QAWNENZLW/bundle.json","state":"https://pith.science/pith/7EEUYIYLFWQNINEC3QAWNENZLW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7EEUYIYLFWQNINEC3QAWNENZLW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:7EEUYIYLFWQNINEC3QAWNENZLW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"35e68b83d26a8b50de5d2687f3f3a0bee6027966e338e8586806d9f3c4c6d078","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T05:16:02Z","title_canon_sha256":"3141ef377f8d59ff1c052becbf4e04fb815ed2541b84ef1f1fdbcd7a524e6cbd"},"schema_version":"1.0","source":{"id":"2608.01710","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01710","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01710v1","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01710","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"pith_short_12","alias_value":"7EEUYIYLFWQN","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"pith_short_16","alias_value":"7EEUYIYLFWQNINEC","created_at":"2026-08-04T02:06:36Z"},{"alias_kind":"pith_short_8","alias_value":"7EEUYIYL","created_at":"2026-08-04T02:06:36Z"}],"graph_snapshots":[{"event_id":"sha256:117f14ba71ce6641756373b2984c63af29757387150bd6c7148782f43faf0430","target":"graph","created_at":"2026-08-04T02:06:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01710/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Tool-using large language model agents frequently replan, retry failed operations, delegate tasks, and resume after crashes. These behaviors can cause one user authorization to be requested and executed multiple times under freshly issued token identifiers, even when each individual token is single-use. We call this failure semantic replay: exceeding the execution budget of a token-independent authorization instance rather than merely reusing an old token identifier. We show that identifier-local token consumption cannot prevent fresh reissuance unless the issuer retains monotonic durable stat","authors_text":"Hankai Liu, Jinghan Xu, Longze Fan, Xinjin Li, Zeyuan Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T05:16:02Z","title":"Beyond Single-Use Tokens: Durable Authorization State for Replay-Resistant LLM Agent Actions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01710","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2ed7d6bb7039582055b69e1e0b64710deb6f3cdf0248fae30ca379dec2119c1d","target":"record","created_at":"2026-08-04T02:06:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"35e68b83d26a8b50de5d2687f3f3a0bee6027966e338e8586806d9f3c4c6d078","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T05:16:02Z","title_canon_sha256":"3141ef377f8d59ff1c052becbf4e04fb815ed2541b84ef1f1fdbcd7a524e6cbd"},"schema_version":"1.0","source":{"id":"2608.01710","kind":"arxiv","version":1}},"canonical_sha256":"f9094c230b2da0d43482dc016691b95dbc4974fc1aa22bb35fce21e2a8e024a0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f9094c230b2da0d43482dc016691b95dbc4974fc1aa22bb35fce21e2a8e024a0","first_computed_at":"2026-08-04T02:06:36.327557Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:06:36.327557Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3FwuBso+ts2LetRDWaA8+giNnSoHuyWrjGUlGXGFPXsTrEmm/fPb4mzide095mMwU2jr423VV5SdTdpdQ0L1Cw==","signature_status":"signed_v1","signed_at":"2026-08-04T02:06:36.328963Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01710","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2ed7d6bb7039582055b69e1e0b64710deb6f3cdf0248fae30ca379dec2119c1d","sha256:117f14ba71ce6641756373b2984c63af29757387150bd6c7148782f43faf0430"],"state_sha256":"72b6acd18d4dec36c259f99360e2def31469302232d37b8353069963b8f43608"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EZaAyeG6EpKmtmKaupvxVUwq2k0TKIfAmDr5cQl0IOWK9ga75wcptzF/fmSRiFn32TalFOJRC3jGDgMjrxUJCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T20:00:53.686718Z","bundle_sha256":"afaefebc0cae0f3d1df750401de48de611f29f7f2ac73d805bef2c3ccbb37144"}}