{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EEFAHCPIHWP22ZYTPJQ6ZUGJEQ","short_pith_number":"pith:EEFAHCPI","canonical_record":{"source":{"id":"2411.13459","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-20T17:08:38Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"e5c21e67d03f2dfa2f4fde5da5ed5da0f44c9429f893099b7ea10e5eed6dac7d","abstract_canon_sha256":"e7fe13a9aa4e306887aac71f3cf2a37976b9f58dd4412a8ed7d0685cdcb37cee"},"schema_version":"1.0"},"canonical_sha256":"210a0389e83d9fad67137a61ecd0c9242b838bf0d5197091ba4efe8e524124f5","source":{"kind":"arxiv","id":"2411.13459","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.13459","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"arxiv_version","alias_value":"2411.13459v1","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.13459","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"pith_short_12","alias_value":"EEFAHCPIHWP2","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"pith_short_16","alias_value":"EEFAHCPIHWP22ZYT","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"pith_short_8","alias_value":"EEFAHCPI","created_at":"2026-07-05T09:38:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EEFAHCPIHWP22ZYTPJQ6ZUGJEQ","target":"record","payload":{"canonical_record":{"source":{"id":"2411.13459","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-20T17:08:38Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"e5c21e67d03f2dfa2f4fde5da5ed5da0f44c9429f893099b7ea10e5eed6dac7d","abstract_canon_sha256":"e7fe13a9aa4e306887aac71f3cf2a37976b9f58dd4412a8ed7d0685cdcb37cee"},"schema_version":"1.0"},"canonical_sha256":"210a0389e83d9fad67137a61ecd0c9242b838bf0d5197091ba4efe8e524124f5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:38:17.291485Z","signature_b64":"cXAPgVybLResobuglL/MeayXzmEmIRcPQGaZd9tjzyzGgv58nQxh54MVIwvZsa0xF/cICE75D75g+LXfsyiACw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"210a0389e83d9fad67137a61ecd0c9242b838bf0d5197091ba4efe8e524124f5","last_reissued_at":"2026-07-05T09:38:17.291044Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:38:17.291044Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.13459","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zOdD0wlkwHaUW49aDklaHEE4InvmQhms/pETZ5AXLhE0K0OqlABtTrDSD4K2RXxgn1sQ9yqoBUT7HhKOgf0pBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:08:43.687020Z"},"content_sha256":"df42c2ee0012635187cedd94523a56afa338c4e6a3eba1275e12a8270daaf48a","schema_version":"1.0","event_id":"sha256:df42c2ee0012635187cedd94523a56afa338c4e6a3eba1275e12a8270daaf48a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EEFAHCPIHWP22ZYTPJQ6ZUGJEQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Anjo Vahldiek-Oberwagner, Mohit Tiwari, Mulong Luo, Neeraja J. Yadwadkar, Prateek Sahu, Sarbartha Banerjee","submitted_at":"2024-11-20T17:08:38Z","abstract_excerpt":"Large language models (LLMs) used across enterprises often use proprietary models and operate on sensitive inputs and data. The wide range of attack vectors identified in prior research - targeting various software and hardware components used in training and inference - makes it extremely challenging to enforce confidentiality and integrity policies.\n  As we advance towards constructing compound AI inference pipelines that integrate multiple large language models (LLMs), the attack surfaces expand significantly. Attackers now focus on the AI algorithms as well as the software and hardware com"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.13459","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.13459/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JDiPoVQJe+UZfi8hSJZvG3cwV0se3BnSMb8yhaCSkOn7er6dnCG/6nNQHNb5FjPZrar4W3xwB4tPinAVI4dbCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:08:43.687586Z"},"content_sha256":"0071131b0648924e6d38c84b8d7b920f80a37a965e60ab3cabf2a4c6975dadde","schema_version":"1.0","event_id":"sha256:0071131b0648924e6d38c84b8d7b920f80a37a965e60ab3cabf2a4c6975dadde"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ/bundle.json","state_url":"https://pith.science/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T22:08:43Z","links":{"resolver":"https://pith.science/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ","bundle":"https://pith.science/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ/bundle.json","state":"https://pith.science/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EEFAHCPIHWP22ZYTPJQ6ZUGJEQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EEFAHCPIHWP22ZYTPJQ6ZUGJEQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e7fe13a9aa4e306887aac71f3cf2a37976b9f58dd4412a8ed7d0685cdcb37cee","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-20T17:08:38Z","title_canon_sha256":"e5c21e67d03f2dfa2f4fde5da5ed5da0f44c9429f893099b7ea10e5eed6dac7d"},"schema_version":"1.0","source":{"id":"2411.13459","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.13459","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"arxiv_version","alias_value":"2411.13459v1","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.13459","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"pith_short_12","alias_value":"EEFAHCPIHWP2","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"pith_short_16","alias_value":"EEFAHCPIHWP22ZYT","created_at":"2026-07-05T09:38:17Z"},{"alias_kind":"pith_short_8","alias_value":"EEFAHCPI","created_at":"2026-07-05T09:38:17Z"}],"graph_snapshots":[{"event_id":"sha256:0071131b0648924e6d38c84b8d7b920f80a37a965e60ab3cabf2a4c6975dadde","target":"graph","created_at":"2026-07-05T09:38:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.13459/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) used across enterprises often use proprietary models and operate on sensitive inputs and data. The wide range of attack vectors identified in prior research - targeting various software and hardware components used in training and inference - makes it extremely challenging to enforce confidentiality and integrity policies.\n  As we advance towards constructing compound AI inference pipelines that integrate multiple large language models (LLMs), the attack surfaces expand significantly. Attackers now focus on the AI algorithms as well as the software and hardware com","authors_text":"Anjo Vahldiek-Oberwagner, Mohit Tiwari, Mulong Luo, Neeraja J. Yadwadkar, Prateek Sahu, Sarbartha Banerjee","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-20T17:08:38Z","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.13459","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:df42c2ee0012635187cedd94523a56afa338c4e6a3eba1275e12a8270daaf48a","target":"record","created_at":"2026-07-05T09:38:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e7fe13a9aa4e306887aac71f3cf2a37976b9f58dd4412a8ed7d0685cdcb37cee","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-20T17:08:38Z","title_canon_sha256":"e5c21e67d03f2dfa2f4fde5da5ed5da0f44c9429f893099b7ea10e5eed6dac7d"},"schema_version":"1.0","source":{"id":"2411.13459","kind":"arxiv","version":1}},"canonical_sha256":"210a0389e83d9fad67137a61ecd0c9242b838bf0d5197091ba4efe8e524124f5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"210a0389e83d9fad67137a61ecd0c9242b838bf0d5197091ba4efe8e524124f5","first_computed_at":"2026-07-05T09:38:17.291044Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:38:17.291044Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cXAPgVybLResobuglL/MeayXzmEmIRcPQGaZd9tjzyzGgv58nQxh54MVIwvZsa0xF/cICE75D75g+LXfsyiACw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:38:17.291485Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.13459","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:df42c2ee0012635187cedd94523a56afa338c4e6a3eba1275e12a8270daaf48a","sha256:0071131b0648924e6d38c84b8d7b920f80a37a965e60ab3cabf2a4c6975dadde"],"state_sha256":"0edc6c35c08bc1611e81057a30b085f056fc81fb05c105d13eedf43ba382ceba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IZQLwVhrtdH8yTgozUBM6hmjgYHXGnHe9OveyfXF+tRSaTSZOMwOt54gk+cHnG3AnepKjJQpDDdt2t6ACIVJAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T22:08:43.692238Z","bundle_sha256":"3024b84a708f5c8dbbf54ccb6a9d185cc2f4555d6da450ad6828368090fd6b29"}}