{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:C2ALE3D2QX2NV23E7N3BUVRNFM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2332140406b9deecc87dd5369d51fe62a11a0a9f7563dc9f920879e669a032c4","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T15:18:06Z","title_canon_sha256":"d921b42e3e01e20a0244942f2c0206e6ee5b9d139ba475c399fb7a17d6223f24"},"schema_version":"1.0","source":{"id":"2607.24893","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.24893","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"arxiv_version","alias_value":"2607.24893v1","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.24893","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_12","alias_value":"C2ALE3D2QX2N","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_16","alias_value":"C2ALE3D2QX2NV23E","created_at":"2026-07-29T00:24:50Z"},{"alias_kind":"pith_short_8","alias_value":"C2ALE3D2","created_at":"2026-07-29T00:24:50Z"}],"graph_snapshots":[{"event_id":"sha256:572f1c067a526124eb061854dda066f45a42dbd9e5ddb73e85a5f9ae13f818c8","target":"graph","created_at":"2026-07-29T00:24:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.24893/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-agent LLM systems can be attacked by a payload that no single agent ever holds in full: a poisoned tool hides encrypted fragments in its observations, spreads them across several agents, and an external step reassembles and executes them after the run. Per-step safety checks that judge each action in isolation may fail to recognize the complete distributed payload. We investigate how early such an attack can be detected while the run is still unfolding, and how robustly it can be caught once its most obvious cues are stripped away. We build a working instance on a hierarchical multi-agen","authors_text":"Dev Prashant Mistry, Diego Fernandez Arias, Ren Wang, Yibo Hu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T15:18:06Z","title":"Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.24893","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2c59fe8df29536090910bad0e129f255fa9e27331db91a179e1ddbc393162071","target":"record","created_at":"2026-07-29T00:24:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2332140406b9deecc87dd5369d51fe62a11a0a9f7563dc9f920879e669a032c4","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-27T15:18:06Z","title_canon_sha256":"d921b42e3e01e20a0244942f2c0206e6ee5b9d139ba475c399fb7a17d6223f24"},"schema_version":"1.0","source":{"id":"2607.24893","kind":"arxiv","version":1}},"canonical_sha256":"1680b26c7a85f4daeb64fb761a562d2b3b3dfc11a1c3634dbbd31a4be050a083","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1680b26c7a85f4daeb64fb761a562d2b3b3dfc11a1c3634dbbd31a4be050a083","first_computed_at":"2026-07-29T00:24:50.298054Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-29T00:24:50.298054Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"d0uEsiTXecugK27NbINoe/ct6ONhalRCjwwBv4WkXlzX7Z5vR5TcMNLrk9+PAeR2C9sk467DAHZ9Rf6r672cDQ==","signature_status":"signed_v1","signed_at":"2026-07-29T00:24:50.298880Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.24893","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2c59fe8df29536090910bad0e129f255fa9e27331db91a179e1ddbc393162071","sha256:572f1c067a526124eb061854dda066f45a42dbd9e5ddb73e85a5f9ae13f818c8"],"state_sha256":"be47724c731f67a76e483f0d17d7c038c0a50214aeaefde2a9b49b2c27274534"}