{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AHQ4NU7CFYFJAQTPKRTHYQLY67","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bbfbacf62656767e109c32caac4542e7769472c7e759722994220c75fb73c4b5","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-17T14:33:36Z","title_canon_sha256":"60678c0249389ecfbee824ee498a7348660ecb67fc5edc66f6aafc52a07ea1b3"},"schema_version":"1.0","source":{"id":"2507.13169","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.13169","created_at":"2026-07-05T11:38:55Z"},{"alias_kind":"arxiv_version","alias_value":"2507.13169v1","created_at":"2026-07-05T11:38:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.13169","created_at":"2026-07-05T11:38:55Z"},{"alias_kind":"pith_short_12","alias_value":"AHQ4NU7CFYFJ","created_at":"2026-07-05T11:38:55Z"},{"alias_kind":"pith_short_16","alias_value":"AHQ4NU7CFYFJAQTP","created_at":"2026-07-05T11:38:55Z"},{"alias_kind":"pith_short_8","alias_value":"AHQ4NU7C","created_at":"2026-07-05T11:38:55Z"}],"graph_snapshots":[{"event_id":"sha256:f4bb05107c703684fdc12689cf301ef543536eb7c6a3c628596272580ce52317","target":"graph","created_at":"2026-07-05T11:38:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.13169/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Prompt injection attacks, where malicious input is designed to manipulate AI systems into ignoring their original instructions and following unauthorized commands instead, were first discovered by Preamble, Inc. in May 2022 and responsibly disclosed to OpenAI. Over the last three years, these attacks have continued to pose a critical security threat to LLM-integrated systems. The emergence of agentic AI systems, where LLMs autonomously perform multistep tasks through tools and coordination with other agents, has fundamentally transformed the threat landscape. Modern prompt injection attacks ca","authors_text":"Jeremy McHugh, Jon Cefalu, Kristina \\v{S}ekrst","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-17T14:33:36Z","title":"Prompt Injection 2.0: Hybrid AI Threats"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.13169","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:db1d8d8bccb95edf4074b7d989cc91efd2c993011801c954d7149e0ce1363dbf","target":"record","created_at":"2026-07-05T11:38:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bbfbacf62656767e109c32caac4542e7769472c7e759722994220c75fb73c4b5","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-17T14:33:36Z","title_canon_sha256":"60678c0249389ecfbee824ee498a7348660ecb67fc5edc66f6aafc52a07ea1b3"},"schema_version":"1.0","source":{"id":"2507.13169","kind":"arxiv","version":1}},"canonical_sha256":"01e1c6d3e22e0a90426f54667c4178f7db181f36ca70b116651ef57054406d6e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"01e1c6d3e22e0a90426f54667c4178f7db181f36ca70b116651ef57054406d6e","first_computed_at":"2026-07-05T11:38:55.842069Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:38:55.842069Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aUOBWXXsj2bQ1BH9tOkWcXlOS5P6UR5eMbO3Y8Lc7WmsttWWia/JgV9eRe7kFA64vrxJUFvRKPX/jQsFDoMDAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:38:55.842558Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.13169","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:db1d8d8bccb95edf4074b7d989cc91efd2c993011801c954d7149e0ce1363dbf","sha256:f4bb05107c703684fdc12689cf301ef543536eb7c6a3c628596272580ce52317"],"state_sha256":"e18e5326080ea8e3bd772b25a0061aa3d89c16bf19112a509b55cfc98cb09235"}