{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BRMTLP6OB6NJL4XD5FAGYC2GHL","short_pith_number":"pith:BRMTLP6O","canonical_record":{"source":{"id":"2309.10254","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T02:20:10Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"title_canon_sha256":"c9e3f224c5aed3c1fc0d2ccefedf3cf944a4a0823bb09a5cc21cc92aa25b34b7","abstract_canon_sha256":"de8e9f155a8d6664c188df20b5da33d5893df8d1afcbc6b2d196289d23105750"},"schema_version":"1.0"},"canonical_sha256":"0c5935bfce0f9a95f2e3e9406c0b463afd8d57514c2c7998e226dc915254042a","source":{"kind":"arxiv","id":"2309.10254","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.10254","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"arxiv_version","alias_value":"2309.10254v2","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.10254","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"pith_short_12","alias_value":"BRMTLP6OB6NJ","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"pith_short_16","alias_value":"BRMTLP6OB6NJL4XD","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"pith_short_8","alias_value":"BRMTLP6O","created_at":"2026-07-05T08:48:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BRMTLP6OB6NJL4XD5FAGYC2GHL","target":"record","payload":{"canonical_record":{"source":{"id":"2309.10254","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T02:20:10Z","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"title_canon_sha256":"c9e3f224c5aed3c1fc0d2ccefedf3cf944a4a0823bb09a5cc21cc92aa25b34b7","abstract_canon_sha256":"de8e9f155a8d6664c188df20b5da33d5893df8d1afcbc6b2d196289d23105750"},"schema_version":"1.0"},"canonical_sha256":"0c5935bfce0f9a95f2e3e9406c0b463afd8d57514c2c7998e226dc915254042a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:48:58.351366Z","signature_b64":"EghiVgl2bIHVhXOmSsHtqPxKoFoTESA7RLN4GLhRX0aMjeg4gWsHmoR/jqjieWq3caUaWnqdlLUQKPhk86SrBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0c5935bfce0f9a95f2e3e9406c0b463afd8d57514c2c7998e226dc915254042a","last_reissued_at":"2026-07-05T08:48:58.350953Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:48:58.350953Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.10254","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:48:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xFJ/cAzl357qbJKUuaIdGprW6GHBEcKrEjWdBM3InlY42KRA7TL/yMyKTZjY5pDfZ2uyt9unXoLaWsjcJnNkCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:12:24.114597Z"},"content_sha256":"26318b72ba5bad8b8b978b2ade5516ae8b4db3bfe68681d8460911219a4fffe0","schema_version":"1.0","event_id":"sha256:26318b72ba5bad8b8b978b2ade5516ae8b4db3bfe68681d8460911219a4fffe0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BRMTLP6OB6NJL4XD5FAGYC2GHL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.CY","cs.LG"],"primary_cat":"cs.CR","authors_text":"Franziska Roesner, Tadayoshi Kohno, Umar Iqbal","submitted_at":"2023-09-19T02:20:10Z","abstract_excerpt":"Large language model (LLM) platforms, such as ChatGPT, have recently begun offering an app ecosystem to interface with third-party services on the internet. While these apps extend the capabilities of LLM platforms, they are developed by arbitrary third parties and thus cannot be implicitly trusted. Apps also interface with LLM platforms and users using natural language, which can have imprecise interpretations. In this paper, we propose a framework that lays a foundation for LLM platform designers to analyze and improve the security, privacy, and safety of current and future third-party integ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.10254","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.10254/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:48:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WyEgCN9eqeFAXDXJNqzhIxRmTOfkayoWCt3naJphR0UruWXL7RV01A7pQiDzA0IEmqfidCM/G8NLX4ghh90QDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:12:24.115392Z"},"content_sha256":"cb18dc8601cd9956dcc11b0d440ed02aea8cf4cfa552ba0ab8045513a55a1504","schema_version":"1.0","event_id":"sha256:cb18dc8601cd9956dcc11b0d440ed02aea8cf4cfa552ba0ab8045513a55a1504"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL/bundle.json","state_url":"https://pith.science/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:12:24Z","links":{"resolver":"https://pith.science/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL","bundle":"https://pith.science/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL/bundle.json","state":"https://pith.science/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BRMTLP6OB6NJL4XD5FAGYC2GHL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BRMTLP6OB6NJL4XD5FAGYC2GHL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"de8e9f155a8d6664c188df20b5da33d5893df8d1afcbc6b2d196289d23105750","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T02:20:10Z","title_canon_sha256":"c9e3f224c5aed3c1fc0d2ccefedf3cf944a4a0823bb09a5cc21cc92aa25b34b7"},"schema_version":"1.0","source":{"id":"2309.10254","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.10254","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"arxiv_version","alias_value":"2309.10254v2","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.10254","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"pith_short_12","alias_value":"BRMTLP6OB6NJ","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"pith_short_16","alias_value":"BRMTLP6OB6NJL4XD","created_at":"2026-07-05T08:48:58Z"},{"alias_kind":"pith_short_8","alias_value":"BRMTLP6O","created_at":"2026-07-05T08:48:58Z"}],"graph_snapshots":[{"event_id":"sha256:cb18dc8601cd9956dcc11b0d440ed02aea8cf4cfa552ba0ab8045513a55a1504","target":"graph","created_at":"2026-07-05T08:48:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.10254/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language model (LLM) platforms, such as ChatGPT, have recently begun offering an app ecosystem to interface with third-party services on the internet. While these apps extend the capabilities of LLM platforms, they are developed by arbitrary third parties and thus cannot be implicitly trusted. Apps also interface with LLM platforms and users using natural language, which can have imprecise interpretations. In this paper, we propose a framework that lays a foundation for LLM platform designers to analyze and improve the security, privacy, and safety of current and future third-party integ","authors_text":"Franziska Roesner, Tadayoshi Kohno, Umar Iqbal","cross_cats":["cs.AI","cs.CL","cs.CY","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T02:20:10Z","title":"LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.10254","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:26318b72ba5bad8b8b978b2ade5516ae8b4db3bfe68681d8460911219a4fffe0","target":"record","created_at":"2026-07-05T08:48:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"de8e9f155a8d6664c188df20b5da33d5893df8d1afcbc6b2d196289d23105750","cross_cats_sorted":["cs.AI","cs.CL","cs.CY","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-19T02:20:10Z","title_canon_sha256":"c9e3f224c5aed3c1fc0d2ccefedf3cf944a4a0823bb09a5cc21cc92aa25b34b7"},"schema_version":"1.0","source":{"id":"2309.10254","kind":"arxiv","version":2}},"canonical_sha256":"0c5935bfce0f9a95f2e3e9406c0b463afd8d57514c2c7998e226dc915254042a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0c5935bfce0f9a95f2e3e9406c0b463afd8d57514c2c7998e226dc915254042a","first_computed_at":"2026-07-05T08:48:58.350953Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:48:58.350953Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EghiVgl2bIHVhXOmSsHtqPxKoFoTESA7RLN4GLhRX0aMjeg4gWsHmoR/jqjieWq3caUaWnqdlLUQKPhk86SrBw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:48:58.351366Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.10254","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:26318b72ba5bad8b8b978b2ade5516ae8b4db3bfe68681d8460911219a4fffe0","sha256:cb18dc8601cd9956dcc11b0d440ed02aea8cf4cfa552ba0ab8045513a55a1504"],"state_sha256":"bd7d0bd115f27626b62809c5b607c6da92dd13a2ddfb40a795aa8ca7a8db524b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"THnvcStvuRTq+mVxAOj4sB17U2uedrxUfEu6w1iU1ZGKD7plmoa6n5V+IgioIf6iSPRSY9ErKZB069lIF1zKDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:12:24.121166Z","bundle_sha256":"f579fd05e62d3e3a020386a2a8e7b66fc573a7e3ae828c8b4533506fe3ed2439"}}