{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:EEJLS5JUDIRPZLJTDJVM67QZMS","short_pith_number":"pith:EEJLS5JU","schema_version":"1.0","canonical_sha256":"2112b975341a22fcad331a6acf7e196492245e9ca56df7c6bbf551e8028548d6","source":{"kind":"arxiv","id":"2608.02518","version":1},"attestation_state":"computed","paper":{"title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.AI","authors_text":"Matthew Dressman, Natalie Isak","submitted_at":"2026-08-03T17:15:55Z","abstract_excerpt":"The most capable AI deployments are not single models but ensembles of specialized agents that delegate and act in coordination. This architecture unlocks powerful new capabilities, and it also introduces risks that existing frameworks for monitoring, detection, and mitigation were not designed to address. Most state-of-the-art AI abuse detection literature focuses on single-turn or multi-turn (single-session) threat models. This leaves a critical gap: an attacker can decompose a harmful goal into innocuous-looking units and execute each in isolated agentic sessions. The agent is stateless bet"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2608.02518","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2026-08-03T17:15:55Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"cea871c8704eb9fdfe80bfc021902981af79f3dee876d10c9fe54de3b330e515","abstract_canon_sha256":"b8d46fcb3d8091ba742af98da7bac045d5ed419a5a40037d34dd2ab28eef0348"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-04T02:43:52.975952Z","signature_b64":"zQw9Vil8BZ3JrHIkCXg6MYo3nry9WRK6kqY1LV5ZcHnxUNdNWAH4X5I1udc+y70wwbmS4AyijfMVVCcuAvzrCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2112b975341a22fcad331a6acf7e196492245e9ca56df7c6bbf551e8028548d6","last_reissued_at":"2026-08-04T02:43:52.973403Z","signature_status":"signed_v1","first_computed_at":"2026-08-04T02:43:52.973403Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.AI","authors_text":"Matthew Dressman, Natalie Isak","submitted_at":"2026-08-03T17:15:55Z","abstract_excerpt":"The most capable AI deployments are not single models but ensembles of specialized agents that delegate and act in coordination. This architecture unlocks powerful new capabilities, and it also introduces risks that existing frameworks for monitoring, detection, and mitigation were not designed to address. Most state-of-the-art AI abuse detection literature focuses on single-turn or multi-turn (single-session) threat models. This leaves a critical gap: an attacker can decompose a harmful goal into innocuous-looking units and execute each in isolated agentic sessions. The agent is stateless bet"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.02518","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.02518/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2608.02518","created_at":"2026-08-04T02:43:52.975959+00:00"},{"alias_kind":"arxiv_version","alias_value":"2608.02518v1","created_at":"2026-08-04T02:43:52.975959+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.02518","created_at":"2026-08-04T02:43:52.975959+00:00"},{"alias_kind":"pith_short_12","alias_value":"EEJLS5JUDIRP","created_at":"2026-08-04T02:43:52.975959+00:00"},{"alias_kind":"pith_short_16","alias_value":"EEJLS5JUDIRPZLJT","created_at":"2026-08-04T02:43:52.975959+00:00"},{"alias_kind":"pith_short_8","alias_value":"EEJLS5JU","created_at":"2026-08-04T02:43:52.975959+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS","json":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS.json","graph_json":"https://pith.science/api/pith-number/EEJLS5JUDIRPZLJTDJVM67QZMS/graph.json","events_json":"https://pith.science/api/pith-number/EEJLS5JUDIRPZLJTDJVM67QZMS/events.json","paper":"https://pith.science/paper/EEJLS5JU"},"agent_actions":{"view_html":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS","download_json":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS.json","view_paper":"https://pith.science/paper/EEJLS5JU","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2608.02518&json=true","fetch_graph":"https://pith.science/api/pith-number/EEJLS5JUDIRPZLJTDJVM67QZMS/graph.json","fetch_events":"https://pith.science/api/pith-number/EEJLS5JUDIRPZLJTDJVM67QZMS/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS/action/timestamp_anchor","attest_storage":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS/action/storage_attestation","attest_author":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS/action/author_attestation","sign_citation":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS/action/citation_signature","submit_replication":"https://pith.science/pith/EEJLS5JUDIRPZLJTDJVM67QZMS/action/replication_record"}},"created_at":"2026-08-04T02:43:52.975959+00:00","updated_at":"2026-08-04T02:43:52.975959+00:00"}