{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7FXSHDWDJGXLQJ6N74KQXDSWM7","short_pith_number":"pith:7FXSHDWD","canonical_record":{"source":{"id":"2403.03792","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T15:40:30Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ccc201e821b94f626679f697736b276c3face631eb5a50f77cf446b3ee2e176f","abstract_canon_sha256":"f69973a59c5df55ec6f4995968b43922890bbdeea328946fe9f4e58612be7a40"},"schema_version":"1.0"},"canonical_sha256":"f96f238ec349aeb827cdff150b8e5667f0f8226211f965422d712640965359ce","source":{"kind":"arxiv","id":"2403.03792","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03792","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03792v2","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03792","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"pith_short_12","alias_value":"7FXSHDWDJGXL","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"pith_short_16","alias_value":"7FXSHDWDJGXLQJ6N","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"pith_short_8","alias_value":"7FXSHDWD","created_at":"2026-07-05T08:14:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7FXSHDWDJGXLQJ6N74KQXDSWM7","target":"record","payload":{"canonical_record":{"source":{"id":"2403.03792","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T15:40:30Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"ccc201e821b94f626679f697736b276c3face631eb5a50f77cf446b3ee2e176f","abstract_canon_sha256":"f69973a59c5df55ec6f4995968b43922890bbdeea328946fe9f4e58612be7a40"},"schema_version":"1.0"},"canonical_sha256":"f96f238ec349aeb827cdff150b8e5667f0f8226211f965422d712640965359ce","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:14:22.492170Z","signature_b64":"hSrAxdhrQR5llMoSkQlSxtMBlgftE/QAY+5WOI85PIWNR8LK0zgcfKGf5XjFuFi2AQB2CyA6uu4WuWoYjV+/Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f96f238ec349aeb827cdff150b8e5667f0f8226211f965422d712640965359ce","last_reissued_at":"2026-07-05T08:14:22.491659Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:14:22.491659Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.03792","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:14:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Lm7KkZw2tbZktThhMxDTPzOxPKd5G0p9sRHyo13LiYu2PZjougDBihjcK4TLPUsiWG9evU+in72faGOW/uRYBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T04:58:33.845272Z"},"content_sha256":"94fdecd0de606c86202e95d0e68118ca52ffff7fa2d6facdfa8a729722a4071e","schema_version":"1.0","event_id":"sha256:94fdecd0de606c86202e95d0e68118ca52ffff7fa2d6facdfa8a729722a4071e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7FXSHDWDJGXLQJ6N74KQXDSWM7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Carmela Troncoso, Dario Pasquini, Martin Strohmeier","submitted_at":"2024-03-06T15:40:30Z","abstract_excerpt":"We introduce a new family of prompt injection attacks, termed Neural Exec. Unlike known attacks that rely on handcrafted strings (e.g., \"Ignore previous instructions and...\"), we show that it is possible to conceptualize the creation of execution triggers as a differentiable search problem and use learning-based methods to autonomously generate them.\n  Our results demonstrate that a motivated adversary can forge triggers that are not only drastically more effective than current handcrafted ones but also exhibit inherent flexibility in shape, properties, and functionality. In this direction, we"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03792","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.03792/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:14:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Osh7dtYSopL5t3G6QPtNNMLoiDKjTjtt7S+J2YeSMHxqzGoGtP2Ij6eiyhXl7iA7yEOPAqlPDAyUpGAhG0nqDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T04:58:33.845796Z"},"content_sha256":"23988304bfb7521d31c5a9465ca12c80b1f19121c7f71c92a8afdefd2bda3391","schema_version":"1.0","event_id":"sha256:23988304bfb7521d31c5a9465ca12c80b1f19121c7f71c92a8afdefd2bda3391"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7/bundle.json","state_url":"https://pith.science/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T04:58:33Z","links":{"resolver":"https://pith.science/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7","bundle":"https://pith.science/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7/bundle.json","state":"https://pith.science/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7FXSHDWDJGXLQJ6N74KQXDSWM7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7FXSHDWDJGXLQJ6N74KQXDSWM7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f69973a59c5df55ec6f4995968b43922890bbdeea328946fe9f4e58612be7a40","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T15:40:30Z","title_canon_sha256":"ccc201e821b94f626679f697736b276c3face631eb5a50f77cf446b3ee2e176f"},"schema_version":"1.0","source":{"id":"2403.03792","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03792","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03792v2","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03792","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"pith_short_12","alias_value":"7FXSHDWDJGXL","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"pith_short_16","alias_value":"7FXSHDWDJGXLQJ6N","created_at":"2026-07-05T08:14:22Z"},{"alias_kind":"pith_short_8","alias_value":"7FXSHDWD","created_at":"2026-07-05T08:14:22Z"}],"graph_snapshots":[{"event_id":"sha256:23988304bfb7521d31c5a9465ca12c80b1f19121c7f71c92a8afdefd2bda3391","target":"graph","created_at":"2026-07-05T08:14:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.03792/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We introduce a new family of prompt injection attacks, termed Neural Exec. Unlike known attacks that rely on handcrafted strings (e.g., \"Ignore previous instructions and...\"), we show that it is possible to conceptualize the creation of execution triggers as a differentiable search problem and use learning-based methods to autonomously generate them.\n  Our results demonstrate that a motivated adversary can forge triggers that are not only drastically more effective than current handcrafted ones but also exhibit inherent flexibility in shape, properties, and functionality. In this direction, we","authors_text":"Carmela Troncoso, Dario Pasquini, Martin Strohmeier","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T15:40:30Z","title":"Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03792","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94fdecd0de606c86202e95d0e68118ca52ffff7fa2d6facdfa8a729722a4071e","target":"record","created_at":"2026-07-05T08:14:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f69973a59c5df55ec6f4995968b43922890bbdeea328946fe9f4e58612be7a40","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T15:40:30Z","title_canon_sha256":"ccc201e821b94f626679f697736b276c3face631eb5a50f77cf446b3ee2e176f"},"schema_version":"1.0","source":{"id":"2403.03792","kind":"arxiv","version":2}},"canonical_sha256":"f96f238ec349aeb827cdff150b8e5667f0f8226211f965422d712640965359ce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f96f238ec349aeb827cdff150b8e5667f0f8226211f965422d712640965359ce","first_computed_at":"2026-07-05T08:14:22.491659Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:14:22.491659Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hSrAxdhrQR5llMoSkQlSxtMBlgftE/QAY+5WOI85PIWNR8LK0zgcfKGf5XjFuFi2AQB2CyA6uu4WuWoYjV+/Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:14:22.492170Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.03792","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94fdecd0de606c86202e95d0e68118ca52ffff7fa2d6facdfa8a729722a4071e","sha256:23988304bfb7521d31c5a9465ca12c80b1f19121c7f71c92a8afdefd2bda3391"],"state_sha256":"ad747a8fc4a4fc5ff0cc42bf03f1f049c36a790c86788048b1179fffdfd6eb12"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BKsmeYnC5mhsil+D4blnW90wpfybjCJHGR7XC1nLCrxd2rD7QNzkWrnluIVgArjxw2iKyOUjCdBzAfDzhjznAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T04:58:33.852436Z","bundle_sha256":"7025d8c996cc565fe3c3c0dd2905c2984cc2e507b9a3ca2b150b8c605d60427e"}}