{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:EQUXEPUATW242OVT2YZHRWR4PU","short_pith_number":"pith:EQUXEPUA","canonical_record":{"source":{"id":"2508.15310","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-21T07:08:16Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"caa8645de6b6cadcdc5d2b075825a49d5193dd515939a1b588ea4efa677fa3a7","abstract_canon_sha256":"190cb0d90f4d7f7e8098f0a6e25a0a63ff4650ee756a7f917ed37108d63162d8"},"schema_version":"1.0"},"canonical_sha256":"2429723e809db5cd3ab3d63278da3c7d23631b14e6dcd8c0664ddb6f5b39171f","source":{"kind":"arxiv","id":"2508.15310","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.15310","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"arxiv_version","alias_value":"2508.15310v1","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.15310","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"pith_short_12","alias_value":"EQUXEPUATW24","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"pith_short_16","alias_value":"EQUXEPUATW242OVT","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"pith_short_8","alias_value":"EQUXEPUA","created_at":"2026-07-05T11:57:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:EQUXEPUATW242OVT2YZHRWR4PU","target":"record","payload":{"canonical_record":{"source":{"id":"2508.15310","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-21T07:08:16Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"caa8645de6b6cadcdc5d2b075825a49d5193dd515939a1b588ea4efa677fa3a7","abstract_canon_sha256":"190cb0d90f4d7f7e8098f0a6e25a0a63ff4650ee756a7f917ed37108d63162d8"},"schema_version":"1.0"},"canonical_sha256":"2429723e809db5cd3ab3d63278da3c7d23631b14e6dcd8c0664ddb6f5b39171f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:57:09.998410Z","signature_b64":"lm9Rt9+ZUhCrD+7CejHnYhqu5ZkaRGJ3E/zG8g2Igkz3nD8C2WIRG+sKYP+c25IP4Kp5INNeqWP6gkXpCQlcAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2429723e809db5cd3ab3d63278da3c7d23631b14e6dcd8c0664ddb6f5b39171f","last_reissued_at":"2026-07-05T11:57:09.997969Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:57:09.997969Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.15310","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:57:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GiODKO9ZWqH9cPJC/rSSHLmWgzq3X/I77ioYppDiN7GA/IBmNv2svdxpR9o3xU2MA9oaZwEz8lbOVookCZNUAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:12:49.199432Z"},"content_sha256":"439837cc142d427f0037e7240daf106cca1764630ecfabba67857f3f3cff1a1b","schema_version":"1.0","event_id":"sha256:439837cc142d427f0037e7240daf106cca1764630ecfabba67857f3f3cff1a1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:EQUXEPUATW242OVT2YZHRWR4PU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Chunyi Zhou, Hengyu An, Jinghuai Zhang, Qingming Li, Shouling Ji, Tao Lin, Tianyu Du","submitted_at":"2025-08-21T07:08:16Z","abstract_excerpt":"Large language model (LLM) agents are widely deployed in real-world applications, where they leverage tools to retrieve and manipulate external data for complex tasks. However, when interacting with untrusted data sources (e.g., fetching information from public websites), tool responses may contain injected instructions that covertly influence agent behaviors and lead to malicious outcomes, a threat referred to as Indirect Prompt Injection (IPI). Existing defenses typically rely on advanced prompting strategies or auxiliary detection models. While these methods have demonstrated some effective"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.15310","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.15310/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:57:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BnXhHLvTKZSDPpQru5QZopu/3H+LctMqhoEDAPULFbGqUcQI9lyEIiQ9rFvXR3kVsOdwOvifg5FL244C3dkmAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T21:12:49.200578Z"},"content_sha256":"65a5509228a364750575565b38e57887ac06d8ebbb90f39de2e63e14540cf625","schema_version":"1.0","event_id":"sha256:65a5509228a364750575565b38e57887ac06d8ebbb90f39de2e63e14540cf625"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EQUXEPUATW242OVT2YZHRWR4PU/bundle.json","state_url":"https://pith.science/pith/EQUXEPUATW242OVT2YZHRWR4PU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EQUXEPUATW242OVT2YZHRWR4PU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T21:12:49Z","links":{"resolver":"https://pith.science/pith/EQUXEPUATW242OVT2YZHRWR4PU","bundle":"https://pith.science/pith/EQUXEPUATW242OVT2YZHRWR4PU/bundle.json","state":"https://pith.science/pith/EQUXEPUATW242OVT2YZHRWR4PU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EQUXEPUATW242OVT2YZHRWR4PU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:EQUXEPUATW242OVT2YZHRWR4PU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"190cb0d90f4d7f7e8098f0a6e25a0a63ff4650ee756a7f917ed37108d63162d8","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-21T07:08:16Z","title_canon_sha256":"caa8645de6b6cadcdc5d2b075825a49d5193dd515939a1b588ea4efa677fa3a7"},"schema_version":"1.0","source":{"id":"2508.15310","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.15310","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"arxiv_version","alias_value":"2508.15310v1","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.15310","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"pith_short_12","alias_value":"EQUXEPUATW24","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"pith_short_16","alias_value":"EQUXEPUATW242OVT","created_at":"2026-07-05T11:57:09Z"},{"alias_kind":"pith_short_8","alias_value":"EQUXEPUA","created_at":"2026-07-05T11:57:09Z"}],"graph_snapshots":[{"event_id":"sha256:65a5509228a364750575565b38e57887ac06d8ebbb90f39de2e63e14540cf625","target":"graph","created_at":"2026-07-05T11:57:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.15310/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language model (LLM) agents are widely deployed in real-world applications, where they leverage tools to retrieve and manipulate external data for complex tasks. However, when interacting with untrusted data sources (e.g., fetching information from public websites), tool responses may contain injected instructions that covertly influence agent behaviors and lead to malicious outcomes, a threat referred to as Indirect Prompt Injection (IPI). Existing defenses typically rely on advanced prompting strategies or auxiliary detection models. While these methods have demonstrated some effective","authors_text":"Chunyi Zhou, Hengyu An, Jinghuai Zhang, Qingming Li, Shouling Ji, Tao Lin, Tianyu Du","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-21T07:08:16Z","title":"IPIGuard: A Novel Tool Dependency Graph-Based Defense Against Indirect Prompt Injection in LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.15310","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:439837cc142d427f0037e7240daf106cca1764630ecfabba67857f3f3cff1a1b","target":"record","created_at":"2026-07-05T11:57:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"190cb0d90f4d7f7e8098f0a6e25a0a63ff4650ee756a7f917ed37108d63162d8","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-21T07:08:16Z","title_canon_sha256":"caa8645de6b6cadcdc5d2b075825a49d5193dd515939a1b588ea4efa677fa3a7"},"schema_version":"1.0","source":{"id":"2508.15310","kind":"arxiv","version":1}},"canonical_sha256":"2429723e809db5cd3ab3d63278da3c7d23631b14e6dcd8c0664ddb6f5b39171f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2429723e809db5cd3ab3d63278da3c7d23631b14e6dcd8c0664ddb6f5b39171f","first_computed_at":"2026-07-05T11:57:09.997969Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:57:09.997969Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lm9Rt9+ZUhCrD+7CejHnYhqu5ZkaRGJ3E/zG8g2Igkz3nD8C2WIRG+sKYP+c25IP4Kp5INNeqWP6gkXpCQlcAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:57:09.998410Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.15310","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:439837cc142d427f0037e7240daf106cca1764630ecfabba67857f3f3cff1a1b","sha256:65a5509228a364750575565b38e57887ac06d8ebbb90f39de2e63e14540cf625"],"state_sha256":"0314168d26edb1aa42564d31f3bace435f28496c513abba2408c49da52c5de43"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1JvmI72QxEWVbyeoKE5v3g5MDqllD7nYl11KcdXY2yAfqziXzSOy/by0rP7s6jU+zYBUVNn7w5G4hjyzzVo7DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T21:12:49.205542Z","bundle_sha256":"fa2f899a40246762b9af1bc8fced18d46a800034f0e334f70458966cdd9017e2"}}