{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:BNVY5MQ5JO4XSTKCXPJQPYCAQU","short_pith_number":"pith:BNVY5MQ5","canonical_record":{"source":{"id":"2608.12851","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-13T05:47:43Z","cross_cats_sorted":[],"title_canon_sha256":"fa564e113929315e73da3cbeecf64cb6e7e51dfdf68a89decc0beae07e489cb5","abstract_canon_sha256":"66f9e9e49ba4688bc4e4cdfcf8f0756ee0ce708d4a8dd859f7e9e505c7956259"},"schema_version":"1.0"},"canonical_sha256":"0b6b8eb21d4bb9794d42bbd307e04085173df3ca3583dfa9b1dfc172dde57623","source":{"kind":"arxiv","id":"2608.12851","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12851","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12851v1","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12851","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"pith_short_12","alias_value":"BNVY5MQ5JO4X","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"pith_short_16","alias_value":"BNVY5MQ5JO4XSTKC","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"pith_short_8","alias_value":"BNVY5MQ5","created_at":"2026-08-14T00:49:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:BNVY5MQ5JO4XSTKCXPJQPYCAQU","target":"record","payload":{"canonical_record":{"source":{"id":"2608.12851","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-13T05:47:43Z","cross_cats_sorted":[],"title_canon_sha256":"fa564e113929315e73da3cbeecf64cb6e7e51dfdf68a89decc0beae07e489cb5","abstract_canon_sha256":"66f9e9e49ba4688bc4e4cdfcf8f0756ee0ce708d4a8dd859f7e9e505c7956259"},"schema_version":"1.0"},"canonical_sha256":"0b6b8eb21d4bb9794d42bbd307e04085173df3ca3583dfa9b1dfc172dde57623","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-14T00:49:10.716049Z","signature_b64":"HokTqoUIGnAyWFzFmPACdjUguZHJQ0n4OSrU+kj4awjXrmWQiXbQb04lIZTjBafTmXVI+JGSUJ4HTWLp+/lPCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b6b8eb21d4bb9794d42bbd307e04085173df3ca3583dfa9b1dfc172dde57623","last_reissued_at":"2026-08-14T00:49:10.705550Z","signature_status":"signed_v1","first_computed_at":"2026-08-14T00:49:10.705550Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.12851","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T00:49:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"szYysaqsGXB75jid7FVXRicEcqMXJo+Kxw9Lit25RhUaktlqtXhWxxshm4v2kwG6JQ9RfKOepXZpvdl1f95eAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T09:15:15.312086Z"},"content_sha256":"d6bbbbd87a097e375372f98c0e877ad37bd7f27cf7808466b1af7698a7442c0b","schema_version":"1.0","event_id":"sha256:d6bbbbd87a097e375372f98c0e877ad37bd7f27cf7808466b1af7698a7442c0b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:BNVY5MQ5JO4XSTKCXPJQPYCAQU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Practice Makes Unsafe: Skill Misevolution in Self-Improving LLM Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Cong Wang, Liangjie Zhao, Xiang Zheng, Xutao Mao","submitted_at":"2026-08-13T05:47:43Z","abstract_excerpt":"Self-improving LLM agents convert successful trajectories into persistent cross-task state. An unsafe success can thereby become reusable policy after its triggering input disappears. Skill evolution makes this failure measurable by distilling operational trajectories into executable, transferable, and inspectable procedures. Because evolution optimizes task outcomes rather than procedure safety, compromised experience can cause skill misevolution. Existing benchmarks measure current behavior or static artifacts but cannot attribute risk across authoring, retrieval, and later execution. To exp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12851","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.12851/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T00:49:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ojy2GDH4ejzDrns7Rh1+ZQiPMrL/q+4XcBy4sUJ7Tbrx5pkZ3ZNjDyPuY8eeh7Qne0yv2qtRrBd60vbgzv6RCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T09:15:15.312606Z"},"content_sha256":"e4201cc76c696d62de4f91abdf786dfe00ae2be80bcedb5793e338ab2970ab18","schema_version":"1.0","event_id":"sha256:e4201cc76c696d62de4f91abdf786dfe00ae2be80bcedb5793e338ab2970ab18"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU/bundle.json","state_url":"https://pith.science/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T09:15:15Z","links":{"resolver":"https://pith.science/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU","bundle":"https://pith.science/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU/bundle.json","state":"https://pith.science/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BNVY5MQ5JO4XSTKCXPJQPYCAQU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:BNVY5MQ5JO4XSTKCXPJQPYCAQU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"66f9e9e49ba4688bc4e4cdfcf8f0756ee0ce708d4a8dd859f7e9e505c7956259","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-13T05:47:43Z","title_canon_sha256":"fa564e113929315e73da3cbeecf64cb6e7e51dfdf68a89decc0beae07e489cb5"},"schema_version":"1.0","source":{"id":"2608.12851","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.12851","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"arxiv_version","alias_value":"2608.12851v1","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.12851","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"pith_short_12","alias_value":"BNVY5MQ5JO4X","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"pith_short_16","alias_value":"BNVY5MQ5JO4XSTKC","created_at":"2026-08-14T00:49:10Z"},{"alias_kind":"pith_short_8","alias_value":"BNVY5MQ5","created_at":"2026-08-14T00:49:10Z"}],"graph_snapshots":[{"event_id":"sha256:e4201cc76c696d62de4f91abdf786dfe00ae2be80bcedb5793e338ab2970ab18","target":"graph","created_at":"2026-08-14T00:49:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.12851/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Self-improving LLM agents convert successful trajectories into persistent cross-task state. An unsafe success can thereby become reusable policy after its triggering input disappears. Skill evolution makes this failure measurable by distilling operational trajectories into executable, transferable, and inspectable procedures. Because evolution optimizes task outcomes rather than procedure safety, compromised experience can cause skill misevolution. Existing benchmarks measure current behavior or static artifacts but cannot attribute risk across authoring, retrieval, and later execution. To exp","authors_text":"Cong Wang, Liangjie Zhao, Xiang Zheng, Xutao Mao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-13T05:47:43Z","title":"Practice Makes Unsafe: Skill Misevolution in Self-Improving LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.12851","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6bbbbd87a097e375372f98c0e877ad37bd7f27cf7808466b1af7698a7442c0b","target":"record","created_at":"2026-08-14T00:49:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"66f9e9e49ba4688bc4e4cdfcf8f0756ee0ce708d4a8dd859f7e9e505c7956259","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2026-08-13T05:47:43Z","title_canon_sha256":"fa564e113929315e73da3cbeecf64cb6e7e51dfdf68a89decc0beae07e489cb5"},"schema_version":"1.0","source":{"id":"2608.12851","kind":"arxiv","version":1}},"canonical_sha256":"0b6b8eb21d4bb9794d42bbd307e04085173df3ca3583dfa9b1dfc172dde57623","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b6b8eb21d4bb9794d42bbd307e04085173df3ca3583dfa9b1dfc172dde57623","first_computed_at":"2026-08-14T00:49:10.705550Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-14T00:49:10.705550Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HokTqoUIGnAyWFzFmPACdjUguZHJQ0n4OSrU+kj4awjXrmWQiXbQb04lIZTjBafTmXVI+JGSUJ4HTWLp+/lPCA==","signature_status":"signed_v1","signed_at":"2026-08-14T00:49:10.716049Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.12851","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6bbbbd87a097e375372f98c0e877ad37bd7f27cf7808466b1af7698a7442c0b","sha256:e4201cc76c696d62de4f91abdf786dfe00ae2be80bcedb5793e338ab2970ab18"],"state_sha256":"a76fbf9ee0c8e766447e929783e3e40c2f886dafbf2e1b0e72380f1d180af2c8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1GQ0gPqRhMRBg755WIVIB8IGtrv1Qkt12yvWIa+upLtOrwzF+fnX4W0s6l4UWw9cuuAiVZh8sdSgUqlpMlZGDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T09:15:15.316344Z","bundle_sha256":"213c2af57fc989b59aef84b5b8f041d95e086d6b9d93badb7cf94d55509c5915"}}