{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CI3KRNGT2FVY5HJEIRVYHTXMR7","short_pith_number":"pith:CI3KRNGT","canonical_record":{"source":{"id":"2505.12490","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T16:25:21Z","cross_cats_sorted":[],"title_canon_sha256":"81eb4cf064c809dc01e549a05c9e8846593aa653e72b68baf5059436163a74d1","abstract_canon_sha256":"761dcb5181682f145c9b1b7f36944fb33f1b2e66153638b31946b09068e18fa9"},"schema_version":"1.0"},"canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","source":{"kind":"arxiv","id":"2505.12490","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12490","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12490v3","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12490","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"pith_short_12","alias_value":"CI3KRNGT2FVY","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"pith_short_16","alias_value":"CI3KRNGT2FVY5HJE","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"pith_short_8","alias_value":"CI3KRNGT","created_at":"2026-07-05T12:01:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CI3KRNGT2FVY5HJEIRVYHTXMR7","target":"record","payload":{"canonical_record":{"source":{"id":"2505.12490","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T16:25:21Z","cross_cats_sorted":[],"title_canon_sha256":"81eb4cf064c809dc01e549a05c9e8846593aa653e72b68baf5059436163a74d1","abstract_canon_sha256":"761dcb5181682f145c9b1b7f36944fb33f1b2e66153638b31946b09068e18fa9"},"schema_version":"1.0"},"canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:01:22.836093Z","signature_b64":"Q0bbFlMdUCAkFp+kvCr7RZlH5RMUdO3z3xW+6B1tb1OsVG1J/i+jTwk0JhCNoDroChF6a1Y7/Moo50ZGyL3QAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","last_reissued_at":"2026-07-05T12:01:22.835448Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:01:22.835448Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.12490","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ztgVT+wGvDL7L3oEHIdVAckgs4BYbpacfXOPfvHLYcjtQgeoV/kmpke78S/pQfAsoM95/GV0CvTFiDobb38zAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T15:44:01.666207Z"},"content_sha256":"3820cf7230cad2f2f29970c5b2180a4a66c77309481df8b4300e6d073f53145d","schema_version":"1.0","event_id":"sha256:3820cf7230cad2f2f29970c5b2180a4a66c77309481df8b4300e6d073f53145d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CI3KRNGT2FVY5HJEIRVYHTXMR7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amit Dvir, Ariel Stulman, Yedidel Louck","submitted_at":"2025-05-18T16:25:21Z","abstract_excerpt":"Googles A2A protocol provides a secure communication framework for AI agents but demonstrates critical limitations when handling highly sensitive information such as payment credentials and identity documents. These gaps increase the risk of unintended harms, including unauthorized disclosure, privilege escalation, and misuse of private data in generative multi-agent environments. In this paper, we identify key weaknesses of A2A: insufficient token lifetime control, lack of strong customer authentication, overbroad access scopes, and missing consent flows. We propose protocol-level enhancement"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12490","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.12490/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h07C6zqqowLbWjUFp77lIfNzB3QRMSB+B6Kko1rWrKTQUZO+cCi0T8ffwMaX+YZYNf6E4rMqvWOWSgJcFQQMDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T15:44:01.666737Z"},"content_sha256":"e10291e3158ed164b65ff9e640179cc25e97f86f94cbfdbc2160c3455b3f402e","schema_version":"1.0","event_id":"sha256:e10291e3158ed164b65ff9e640179cc25e97f86f94cbfdbc2160c3455b3f402e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/bundle.json","state_url":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T15:44:01Z","links":{"resolver":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7","bundle":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/bundle.json","state":"https://pith.science/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CI3KRNGT2FVY5HJEIRVYHTXMR7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CI3KRNGT2FVY5HJEIRVYHTXMR7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"761dcb5181682f145c9b1b7f36944fb33f1b2e66153638b31946b09068e18fa9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T16:25:21Z","title_canon_sha256":"81eb4cf064c809dc01e549a05c9e8846593aa653e72b68baf5059436163a74d1"},"schema_version":"1.0","source":{"id":"2505.12490","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12490","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12490v3","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12490","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"pith_short_12","alias_value":"CI3KRNGT2FVY","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"pith_short_16","alias_value":"CI3KRNGT2FVY5HJE","created_at":"2026-07-05T12:01:22Z"},{"alias_kind":"pith_short_8","alias_value":"CI3KRNGT","created_at":"2026-07-05T12:01:22Z"}],"graph_snapshots":[{"event_id":"sha256:e10291e3158ed164b65ff9e640179cc25e97f86f94cbfdbc2160c3455b3f402e","target":"graph","created_at":"2026-07-05T12:01:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.12490/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Googles A2A protocol provides a secure communication framework for AI agents but demonstrates critical limitations when handling highly sensitive information such as payment credentials and identity documents. These gaps increase the risk of unintended harms, including unauthorized disclosure, privilege escalation, and misuse of private data in generative multi-agent environments. In this paper, we identify key weaknesses of A2A: insufficient token lifetime control, lack of strong customer authentication, overbroad access scopes, and missing consent flows. We propose protocol-level enhancement","authors_text":"Amit Dvir, Ariel Stulman, Yedidel Louck","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T16:25:21Z","title":"Improving Google A2A Protocol: Protecting Sensitive Data and Mitigating Unintended Harms in Multi-Agent Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12490","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3820cf7230cad2f2f29970c5b2180a4a66c77309481df8b4300e6d073f53145d","target":"record","created_at":"2026-07-05T12:01:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"761dcb5181682f145c9b1b7f36944fb33f1b2e66153638b31946b09068e18fa9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-18T16:25:21Z","title_canon_sha256":"81eb4cf064c809dc01e549a05c9e8846593aa653e72b68baf5059436163a74d1"},"schema_version":"1.0","source":{"id":"2505.12490","kind":"arxiv","version":3}},"canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1236a8b4d3d16b8e9d24446b83ceec8ff6de2e53ba41b346592404b5c2a42a81","first_computed_at":"2026-07-05T12:01:22.835448Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:01:22.835448Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Q0bbFlMdUCAkFp+kvCr7RZlH5RMUdO3z3xW+6B1tb1OsVG1J/i+jTwk0JhCNoDroChF6a1Y7/Moo50ZGyL3QAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:01:22.836093Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.12490","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3820cf7230cad2f2f29970c5b2180a4a66c77309481df8b4300e6d073f53145d","sha256:e10291e3158ed164b65ff9e640179cc25e97f86f94cbfdbc2160c3455b3f402e"],"state_sha256":"6fd1afad9c037a3e58904125455cbd99d89dbe2767e2d67d8a26c4447f0185dc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D/lNQIXCt/RldREsNnnmlCJ5921GKd+Lul5rrmT2wVGAsAn0UfoqQvDMzFzWzJrK4jERdaufh73cm7Va7+SkAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T15:44:01.672540Z","bundle_sha256":"11aefab97eea33da8d6dc48c5a8043ec3e4c6e240ad63c91d3b33f5f06e7373d"}}