{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ABQGDUQZSAYLWIH7N4PTUKDDQW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"daccfa74000aaed2f5d77aef794e91c07407214dcae107844c95c8117511b7e0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-22T06:55:57Z","title_canon_sha256":"d83cf54dd8e1484ea7606d40065c990a7fdb5fdf772ed0f69a805cabaa4eaf8e"},"schema_version":"1.0","source":{"id":"2606.22916","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.22916","created_at":"2026-06-23T03:14:04Z"},{"alias_kind":"arxiv_version","alias_value":"2606.22916v1","created_at":"2026-06-23T03:14:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.22916","created_at":"2026-06-23T03:14:04Z"},{"alias_kind":"pith_short_12","alias_value":"ABQGDUQZSAYL","created_at":"2026-06-23T03:14:04Z"},{"alias_kind":"pith_short_16","alias_value":"ABQGDUQZSAYLWIH7","created_at":"2026-06-23T03:14:04Z"},{"alias_kind":"pith_short_8","alias_value":"ABQGDUQZ","created_at":"2026-06-23T03:14:04Z"}],"graph_snapshots":[{"event_id":"sha256:f566d0d99e72f3e43d97e14ee1230feefbd86100671108e6f079f485b4292ad9","target":"graph","created_at":"2026-06-23T03:14:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.22916/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI agents increasingly act through external tools: they read private data, construct structured payloads, submit write requests, export records, and coordinate workflows across application boundaries. Existing authorization mechanisms usually ask whether an integration credential, app, or token can call a tool. That question is necessary but incomplete. A tool call can be authorized by static credentials and still be unjustified by the user's current request. For example, a credential that can read and export records should not expose export authority when the user only asked for a bounded sum","authors_text":"Chu Wang, Genliang Zhu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-22T06:55:57Z","title":"Intent-Governed Tool Authorization for AI Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.22916","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:85b66e08a942acdf820a481da8574abba7a37484bf24a9d2a1ad609ce573092b","target":"record","created_at":"2026-06-23T03:14:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"daccfa74000aaed2f5d77aef794e91c07407214dcae107844c95c8117511b7e0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-06-22T06:55:57Z","title_canon_sha256":"d83cf54dd8e1484ea7606d40065c990a7fdb5fdf772ed0f69a805cabaa4eaf8e"},"schema_version":"1.0","source":{"id":"2606.22916","kind":"arxiv","version":1}},"canonical_sha256":"006061d2199030bb20ff6f1f3a28638590fde382ac01974fc51faa7826529029","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"006061d2199030bb20ff6f1f3a28638590fde382ac01974fc51faa7826529029","first_computed_at":"2026-06-23T03:14:04.104399Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T03:14:04.104399Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LlC8BZ/X8DLoHJLbjAA5uboB2oB1m/S2y/Gy+56d3gEVG8ux8nx0eMZNXAts0aBw5WUqhToKBkCi1/fqsj9sDg==","signature_status":"signed_v1","signed_at":"2026-06-23T03:14:04.104797Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.22916","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:85b66e08a942acdf820a481da8574abba7a37484bf24a9d2a1ad609ce573092b","sha256:f566d0d99e72f3e43d97e14ee1230feefbd86100671108e6f079f485b4292ad9"],"state_sha256":"fbf73cd040c53cc598639cd954b54ddd5bdf99dffeb44f54b1cbee3b43b271b8"}