{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:CYNSEPYQWHZFP2GTKEXDLG6VH2","short_pith_number":"pith:CYNSEPYQ","canonical_record":{"source":{"id":"2607.07097","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-07-08T07:31:37Z","cross_cats_sorted":["cs.CR","cs.MA"],"title_canon_sha256":"f8a342b209e110aa6904b2536bb3a8d4960dd1b4f5d1061325a24183870586c4","abstract_canon_sha256":"b51b3cd48a8d4edd8093ec6f408eee804431e12467160b8730a161cc7a2d26a5"},"schema_version":"1.0"},"canonical_sha256":"161b223f10b1f257e8d3512e359bd53e989d5812807f197b8149b3c147ff5009","source":{"kind":"arxiv","id":"2607.07097","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07097","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07097v1","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07097","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_12","alias_value":"CYNSEPYQWHZF","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_16","alias_value":"CYNSEPYQWHZFP2GT","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_8","alias_value":"CYNSEPYQ","created_at":"2026-07-09T01:20:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:CYNSEPYQWHZFP2GTKEXDLG6VH2","target":"record","payload":{"canonical_record":{"source":{"id":"2607.07097","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-07-08T07:31:37Z","cross_cats_sorted":["cs.CR","cs.MA"],"title_canon_sha256":"f8a342b209e110aa6904b2536bb3a8d4960dd1b4f5d1061325a24183870586c4","abstract_canon_sha256":"b51b3cd48a8d4edd8093ec6f408eee804431e12467160b8730a161cc7a2d26a5"},"schema_version":"1.0"},"canonical_sha256":"161b223f10b1f257e8d3512e359bd53e989d5812807f197b8149b3c147ff5009","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-09T01:20:14.390629Z","signature_b64":"UNbPPNvz1mpNocWWAoc6ncZBeLAjMEo/mMzziFM7W43/sTYiHxOGYyp85Ps9NJdzjXA7E0gLVnC2FgiZFXjZBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"161b223f10b1f257e8d3512e359bd53e989d5812807f197b8149b3c147ff5009","last_reissued_at":"2026-07-09T01:20:14.390233Z","signature_status":"signed_v1","first_computed_at":"2026-07-09T01:20:14.390233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.07097","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xCWrCAh7zPNtlFZO+14H9CPhuOAxWXDNGylrdTOlxWyj3TfDDCcKa9fHvLUaxDKmb+NbE+7Hzffx3EPdQWLFBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:47:41.060675Z"},"content_sha256":"428f83633345d3e3a5526b9bfae85c29fb67c777c1ad9648c4e3e045575de801","schema_version":"1.0","event_id":"sha256:428f83633345d3e3a5526b9bfae85c29fb67c777c1ad9648c4e3e045575de801"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:CYNSEPYQWHZFP2GTKEXDLG6VH2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.MA"],"primary_cat":"cs.AI","authors_text":"Haoran Yu, Lifei Liu, Pin Qian, Su Wang, Xiaochong Jiang, Yihang Chen","submitted_at":"2026-07-08T07:31:37Z","abstract_excerpt":"Safety evaluations of multi-agent LLM systems often compare a direct prompt with a planner-executor pipeline and report the difference as a single \"pipeline effect.\" We argue that this aggregate is difficult to interpret because it conflates three mechanisms: harmful intent may be reframed as plausible operational work, the planner may refuse or transform the request, and the executor may act under delegation prompts implying prior approval. To separate these factors, we introduce a five-condition controlled contrast design, evaluated on 30 synthetic harmful scenarios and an exploratory extern"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07097","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.07097/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T01:20:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WOLK0+c31QVPOR/IjJ20T5oP2QdSSPJIGWixI8U4p/tmt51SbTn4DMxsWcn7fhhaSZvBFlS2rLyX0sYhSfdbCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:47:41.061343Z"},"content_sha256":"734e0e6b61d515466e91868cd38d79d3e08485a3af72dda6e799519c1200fcda","schema_version":"1.0","event_id":"sha256:734e0e6b61d515466e91868cd38d79d3e08485a3af72dda6e799519c1200fcda"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2/bundle.json","state_url":"https://pith.science/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T14:47:41Z","links":{"resolver":"https://pith.science/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2","bundle":"https://pith.science/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2/bundle.json","state":"https://pith.science/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CYNSEPYQWHZFP2GTKEXDLG6VH2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:CYNSEPYQWHZFP2GTKEXDLG6VH2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b51b3cd48a8d4edd8093ec6f408eee804431e12467160b8730a161cc7a2d26a5","cross_cats_sorted":["cs.CR","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-07-08T07:31:37Z","title_canon_sha256":"f8a342b209e110aa6904b2536bb3a8d4960dd1b4f5d1061325a24183870586c4"},"schema_version":"1.0","source":{"id":"2607.07097","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.07097","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"arxiv_version","alias_value":"2607.07097v1","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.07097","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_12","alias_value":"CYNSEPYQWHZF","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_16","alias_value":"CYNSEPYQWHZFP2GT","created_at":"2026-07-09T01:20:14Z"},{"alias_kind":"pith_short_8","alias_value":"CYNSEPYQ","created_at":"2026-07-09T01:20:14Z"}],"graph_snapshots":[{"event_id":"sha256:734e0e6b61d515466e91868cd38d79d3e08485a3af72dda6e799519c1200fcda","target":"graph","created_at":"2026-07-09T01:20:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.07097/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Safety evaluations of multi-agent LLM systems often compare a direct prompt with a planner-executor pipeline and report the difference as a single \"pipeline effect.\" We argue that this aggregate is difficult to interpret because it conflates three mechanisms: harmful intent may be reframed as plausible operational work, the planner may refuse or transform the request, and the executor may act under delegation prompts implying prior approval. To separate these factors, we introduce a five-condition controlled contrast design, evaluated on 30 synthetic harmful scenarios and an exploratory extern","authors_text":"Haoran Yu, Lifei Liu, Pin Qian, Su Wang, Xiaochong Jiang, Yihang Chen","cross_cats":["cs.CR","cs.MA"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-07-08T07:31:37Z","title":"Operational Reframing and Approval-Framed Delegation in Multi-Agent LLM Safety"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.07097","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:428f83633345d3e3a5526b9bfae85c29fb67c777c1ad9648c4e3e045575de801","target":"record","created_at":"2026-07-09T01:20:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b51b3cd48a8d4edd8093ec6f408eee804431e12467160b8730a161cc7a2d26a5","cross_cats_sorted":["cs.CR","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-07-08T07:31:37Z","title_canon_sha256":"f8a342b209e110aa6904b2536bb3a8d4960dd1b4f5d1061325a24183870586c4"},"schema_version":"1.0","source":{"id":"2607.07097","kind":"arxiv","version":1}},"canonical_sha256":"161b223f10b1f257e8d3512e359bd53e989d5812807f197b8149b3c147ff5009","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"161b223f10b1f257e8d3512e359bd53e989d5812807f197b8149b3c147ff5009","first_computed_at":"2026-07-09T01:20:14.390233Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T01:20:14.390233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UNbPPNvz1mpNocWWAoc6ncZBeLAjMEo/mMzziFM7W43/sTYiHxOGYyp85Ps9NJdzjXA7E0gLVnC2FgiZFXjZBg==","signature_status":"signed_v1","signed_at":"2026-07-09T01:20:14.390629Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.07097","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:428f83633345d3e3a5526b9bfae85c29fb67c777c1ad9648c4e3e045575de801","sha256:734e0e6b61d515466e91868cd38d79d3e08485a3af72dda6e799519c1200fcda"],"state_sha256":"37818336ef49a5dfcd25b8385d7677b43af5a82752cf26c3f2a14f0c0b17acb3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nDldv7mlV0HBJwtXj9+neEtvuQtxqirk7xVZnsnQW8KIFagI39TreDFJBj1woNi0vygi+W+1LROjC/Ai9DG4DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T14:47:41.068333Z","bundle_sha256":"922d07acac2898d7d2c8a5f25edf0d06cbcb4d760ead682663fbc8915ec626d4"}}