{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EU2IPK3GB5VFPC56HWKR7WQHOF","short_pith_number":"pith:EU2IPK3G","canonical_record":{"source":{"id":"2410.14923","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-19T01:00:57Z","cross_cats_sorted":[],"title_canon_sha256":"7dfadf6bd6f0aa24d62c0dd709a37c3571449b415eace6fd22481b5cf3c24222","abstract_canon_sha256":"4a34836172b63f13c21dbf045426079c3905d93f09db4c5416b1e972bd6cf9d9"},"schema_version":"1.0"},"canonical_sha256":"253487ab660f6a578bbe3d951fda07714cb6cf374634686345d1bbcb5c460d76","source":{"kind":"arxiv","id":"2410.14923","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.14923","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"arxiv_version","alias_value":"2410.14923v2","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.14923","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"pith_short_12","alias_value":"EU2IPK3GB5VF","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"pith_short_16","alias_value":"EU2IPK3GB5VFPC56","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"pith_short_8","alias_value":"EU2IPK3G","created_at":"2026-07-05T09:24:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EU2IPK3GB5VFPC56HWKR7WQHOF","target":"record","payload":{"canonical_record":{"source":{"id":"2410.14923","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-19T01:00:57Z","cross_cats_sorted":[],"title_canon_sha256":"7dfadf6bd6f0aa24d62c0dd709a37c3571449b415eace6fd22481b5cf3c24222","abstract_canon_sha256":"4a34836172b63f13c21dbf045426079c3905d93f09db4c5416b1e972bd6cf9d9"},"schema_version":"1.0"},"canonical_sha256":"253487ab660f6a578bbe3d951fda07714cb6cf374634686345d1bbcb5c460d76","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:24:00.928091Z","signature_b64":"9EThMQ8eEC/31pUSbFrIq9138jmTHksPFOOMD7XqkCAwgwtCNYoqRWmZU5rh5h3iBcADwoPcAdlQVNMdHv0zBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"253487ab660f6a578bbe3d951fda07714cb6cf374634686345d1bbcb5c460d76","last_reissued_at":"2026-07-05T09:24:00.927599Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:24:00.927599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.14923","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Di0kblX/hBleZSRBqoce5wAqoqojsudggTspvnCY5tnmqNeqh1DFdLkOuHseYV8ddREZY7Vp7mFTsxTcXyqODA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:00:52.816214Z"},"content_sha256":"b0fdd3130305724c94c824662810e4cd0a95404f1bdef25d15ff6cd7dda42d7f","schema_version":"1.0","event_id":"sha256:b0fdd3130305724c94c824662810e4cd0a95404f1bdef25d15ff6cd7dda42d7f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EU2IPK3GB5VFPC56HWKR7WQHOF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Imprompter: Tricking LLM Agents into Improper Tool Use","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Earlence Fernandes, Rajesh K. Gupta, Shuheng Li, Taylor Berg-Kirkpatrick, Xiaohan Fu, Yihao Liu, Zihan Wang","submitted_at":"2024-10-19T01:00:57Z","abstract_excerpt":"Large Language Model (LLM) Agents are an emerging computing paradigm that blends generative machine learning with tools such as code interpreters, web browsing, email, and more generally, external resources. These agent-based systems represent an emerging shift in personal computing. We contribute to the security foundations of agent-based systems and surface a new class of automatically computed obfuscated adversarial prompt attacks that violate the confidentiality and integrity of user resources connected to an LLM agent. We show how prompt optimization techniques can find such prompts autom"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.14923","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.14923/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZMeUW7gdJVv9TULpy/COY6hdJE6hNyA/eY9cQOdnKJeprlbk3CPUQCZwTOhCu+5bz0snuNH6obsw9ruEZph1CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T03:00:52.816689Z"},"content_sha256":"5877cb5f9426f94247a4d614c0baf22da4c4a056c6833f0d082763e85df1ba5d","schema_version":"1.0","event_id":"sha256:5877cb5f9426f94247a4d614c0baf22da4c4a056c6833f0d082763e85df1ba5d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EU2IPK3GB5VFPC56HWKR7WQHOF/bundle.json","state_url":"https://pith.science/pith/EU2IPK3GB5VFPC56HWKR7WQHOF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EU2IPK3GB5VFPC56HWKR7WQHOF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T03:00:52Z","links":{"resolver":"https://pith.science/pith/EU2IPK3GB5VFPC56HWKR7WQHOF","bundle":"https://pith.science/pith/EU2IPK3GB5VFPC56HWKR7WQHOF/bundle.json","state":"https://pith.science/pith/EU2IPK3GB5VFPC56HWKR7WQHOF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EU2IPK3GB5VFPC56HWKR7WQHOF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EU2IPK3GB5VFPC56HWKR7WQHOF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4a34836172b63f13c21dbf045426079c3905d93f09db4c5416b1e972bd6cf9d9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-19T01:00:57Z","title_canon_sha256":"7dfadf6bd6f0aa24d62c0dd709a37c3571449b415eace6fd22481b5cf3c24222"},"schema_version":"1.0","source":{"id":"2410.14923","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.14923","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"arxiv_version","alias_value":"2410.14923v2","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.14923","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"pith_short_12","alias_value":"EU2IPK3GB5VF","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"pith_short_16","alias_value":"EU2IPK3GB5VFPC56","created_at":"2026-07-05T09:24:00Z"},{"alias_kind":"pith_short_8","alias_value":"EU2IPK3G","created_at":"2026-07-05T09:24:00Z"}],"graph_snapshots":[{"event_id":"sha256:5877cb5f9426f94247a4d614c0baf22da4c4a056c6833f0d082763e85df1ba5d","target":"graph","created_at":"2026-07-05T09:24:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.14923/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) Agents are an emerging computing paradigm that blends generative machine learning with tools such as code interpreters, web browsing, email, and more generally, external resources. These agent-based systems represent an emerging shift in personal computing. We contribute to the security foundations of agent-based systems and surface a new class of automatically computed obfuscated adversarial prompt attacks that violate the confidentiality and integrity of user resources connected to an LLM agent. We show how prompt optimization techniques can find such prompts autom","authors_text":"Earlence Fernandes, Rajesh K. Gupta, Shuheng Li, Taylor Berg-Kirkpatrick, Xiaohan Fu, Yihao Liu, Zihan Wang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-19T01:00:57Z","title":"Imprompter: Tricking LLM Agents into Improper Tool Use"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.14923","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b0fdd3130305724c94c824662810e4cd0a95404f1bdef25d15ff6cd7dda42d7f","target":"record","created_at":"2026-07-05T09:24:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4a34836172b63f13c21dbf045426079c3905d93f09db4c5416b1e972bd6cf9d9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-19T01:00:57Z","title_canon_sha256":"7dfadf6bd6f0aa24d62c0dd709a37c3571449b415eace6fd22481b5cf3c24222"},"schema_version":"1.0","source":{"id":"2410.14923","kind":"arxiv","version":2}},"canonical_sha256":"253487ab660f6a578bbe3d951fda07714cb6cf374634686345d1bbcb5c460d76","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"253487ab660f6a578bbe3d951fda07714cb6cf374634686345d1bbcb5c460d76","first_computed_at":"2026-07-05T09:24:00.927599Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:24:00.927599Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9EThMQ8eEC/31pUSbFrIq9138jmTHksPFOOMD7XqkCAwgwtCNYoqRWmZU5rh5h3iBcADwoPcAdlQVNMdHv0zBg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:24:00.928091Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.14923","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b0fdd3130305724c94c824662810e4cd0a95404f1bdef25d15ff6cd7dda42d7f","sha256:5877cb5f9426f94247a4d614c0baf22da4c4a056c6833f0d082763e85df1ba5d"],"state_sha256":"493c08d3937674917d4a9eddf81476b9f8d4388738ea80bf692365632e12444f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zRat+8CLcur3/Dk+gzo32rpSFtCf0LMJvbBeBYO0MmKfaOnGBFmgnU0XWtakaL6bZX7qySXpBQC8+ulYtk6jCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T03:00:52.820196Z","bundle_sha256":"0bfca850bcabb13613c7150fa17e42c4164214e100783ccafad38dd503c36e49"}}