{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AJN4JMUHRGRELNX56CULS7UT35","short_pith_number":"pith:AJN4JMUH","canonical_record":{"source":{"id":"2507.05445","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-07T19:50:21Z","cross_cats_sorted":[],"title_canon_sha256":"79d6e5ca8d3b1bde545760b3ccc9c3e8046269c9771c5be450cb5da9a60885a5","abstract_canon_sha256":"a3947301cf6e9c75815dc8a4cc188d535cfd955443c3727458001f5fdfa1c6af"},"schema_version":"1.0"},"canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","source":{"kind":"arxiv","id":"2507.05445","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.05445","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"arxiv_version","alias_value":"2507.05445v1","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.05445","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"pith_short_12","alias_value":"AJN4JMUHRGRE","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"AJN4JMUHRGRELNX5","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"AJN4JMUH","created_at":"2026-07-05T11:33:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AJN4JMUHRGRELNX56CULS7UT35","target":"record","payload":{"canonical_record":{"source":{"id":"2507.05445","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-07T19:50:21Z","cross_cats_sorted":[],"title_canon_sha256":"79d6e5ca8d3b1bde545760b3ccc9c3e8046269c9771c5be450cb5da9a60885a5","abstract_canon_sha256":"a3947301cf6e9c75815dc8a4cc188d535cfd955443c3727458001f5fdfa1c6af"},"schema_version":"1.0"},"canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:33:30.568024Z","signature_b64":"zptqwUM+vRKbiFjiGZgu/2pYMO3AuENagHmE8EtV3LwYhLNv+29N1VSDYti2y0mnK5tKj37G9y5lCCUC0iszAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","last_reissued_at":"2026-07-05T11:33:30.567543Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:33:30.567543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.05445","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z7pQ93j7LFr4R8EfqXDsnqQbyplPjAXCxfDamiQFCQjGKrX8BKFJr/NEFBWI2GkBXKEloKrEQ505/gFBK7VmDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T02:24:16.705819Z"},"content_sha256":"4d4c3f1dd0cf660d12e72a8921c4298b83bff3314b2b5e1cbc5bcec4e6158fbb","schema_version":"1.0","event_id":"sha256:4d4c3f1dd0cf660d12e72a8921c4298b83bff3314b2b5e1cbc5bcec4e6158fbb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AJN4JMUHRGRELNX56CULS7UT35","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Systematization of Security Vulnerabilities in Computer Use Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amanda Minnich, Blake Bullwinkel, Daniel Jones, Gary Lopez, Giorgio Severi, Joris de Gruyter, Justin Song, Martin Pouliot, Pamela Cortez, Santiago Zanella-Beguelin","submitted_at":"2025-07-07T19:50:21Z","abstract_excerpt":"Computer Use Agents (CUAs), autonomous systems that interact with software interfaces via browsers or virtual machines, are rapidly being deployed in consumer and enterprise environments. These agents introduce novel attack surfaces and trust boundaries that are not captured by traditional threat models. Despite their growing capabilities, the security boundaries of CUAs remain poorly understood. In this paper, we conduct a systematic threat analysis and testing of real-world CUAs under adversarial conditions. We identify seven classes of risks unique to the CUA paradigm, and analyze three con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.05445","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.05445/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mAt6eTBbpMwJzduGEaJun8UCgzrv/I6GPKdx15Hxd+wxMVGZGFiJJzEy195lmaqbXR/kq2BsjQYYbIqiv78ODw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-27T02:24:16.706210Z"},"content_sha256":"8e41446448799167685b0d41181ba147286a11c2743a5ff2176eecde9e2dc1ae","schema_version":"1.0","event_id":"sha256:8e41446448799167685b0d41181ba147286a11c2743a5ff2176eecde9e2dc1ae"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/bundle.json","state_url":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AJN4JMUHRGRELNX56CULS7UT35/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-27T02:24:16Z","links":{"resolver":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35","bundle":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/bundle.json","state":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AJN4JMUHRGRELNX56CULS7UT35/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AJN4JMUHRGRELNX56CULS7UT35","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a3947301cf6e9c75815dc8a4cc188d535cfd955443c3727458001f5fdfa1c6af","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-07T19:50:21Z","title_canon_sha256":"79d6e5ca8d3b1bde545760b3ccc9c3e8046269c9771c5be450cb5da9a60885a5"},"schema_version":"1.0","source":{"id":"2507.05445","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.05445","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"arxiv_version","alias_value":"2507.05445v1","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.05445","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"pith_short_12","alias_value":"AJN4JMUHRGRE","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"AJN4JMUHRGRELNX5","created_at":"2026-07-05T11:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"AJN4JMUH","created_at":"2026-07-05T11:33:30Z"}],"graph_snapshots":[{"event_id":"sha256:8e41446448799167685b0d41181ba147286a11c2743a5ff2176eecde9e2dc1ae","target":"graph","created_at":"2026-07-05T11:33:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.05445/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Computer Use Agents (CUAs), autonomous systems that interact with software interfaces via browsers or virtual machines, are rapidly being deployed in consumer and enterprise environments. These agents introduce novel attack surfaces and trust boundaries that are not captured by traditional threat models. Despite their growing capabilities, the security boundaries of CUAs remain poorly understood. In this paper, we conduct a systematic threat analysis and testing of real-world CUAs under adversarial conditions. We identify seven classes of risks unique to the CUA paradigm, and analyze three con","authors_text":"Amanda Minnich, Blake Bullwinkel, Daniel Jones, Gary Lopez, Giorgio Severi, Joris de Gruyter, Justin Song, Martin Pouliot, Pamela Cortez, Santiago Zanella-Beguelin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-07T19:50:21Z","title":"A Systematization of Security Vulnerabilities in Computer Use Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.05445","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d4c3f1dd0cf660d12e72a8921c4298b83bff3314b2b5e1cbc5bcec4e6158fbb","target":"record","created_at":"2026-07-05T11:33:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a3947301cf6e9c75815dc8a4cc188d535cfd955443c3727458001f5fdfa1c6af","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-07T19:50:21Z","title_canon_sha256":"79d6e5ca8d3b1bde545760b3ccc9c3e8046269c9771c5be450cb5da9a60885a5"},"schema_version":"1.0","source":{"id":"2507.05445","kind":"arxiv","version":1}},"canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","first_computed_at":"2026-07-05T11:33:30.567543Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:33:30.567543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zptqwUM+vRKbiFjiGZgu/2pYMO3AuENagHmE8EtV3LwYhLNv+29N1VSDYti2y0mnK5tKj37G9y5lCCUC0iszAA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:33:30.568024Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.05445","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d4c3f1dd0cf660d12e72a8921c4298b83bff3314b2b5e1cbc5bcec4e6158fbb","sha256:8e41446448799167685b0d41181ba147286a11c2743a5ff2176eecde9e2dc1ae"],"state_sha256":"402db4819749d3aa5b404eff630a013a42870e3af66fd43c428b637aedc5e760"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TwQfbl6+/jhES2oc1x1OL79aG9+WbBrWhnOah0iyBNxx8PdbQG/7kEddX+wVE1jY9tLyKWpdptdNYcScTIF/Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-27T02:24:16.708801Z","bundle_sha256":"26ca733b62d99ba03cf641579b424132c6cc20d58f7cde02eaad493a7aa17e31"}}