{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:EYRCAIXS7WNN7UA5XLIOMUJLGT","short_pith_number":"pith:EYRCAIXS","canonical_record":{"source":{"id":"2505.23817","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-27T21:36:27Z","cross_cats_sorted":[],"title_canon_sha256":"c7a624e6267dc8ed994a043a0a0a6615b379527dc6a85fadf8b547e2528cf57a","abstract_canon_sha256":"3e7276109f93814a32a94a0ab4d09899083a32b34c78bf8f19d9bda403a939d9"},"schema_version":"1.0"},"canonical_sha256":"26222022f2fd9adfd01dbad0e6512b34f520e8b735fc5ff82e8566b6231db953","source":{"kind":"arxiv","id":"2505.23817","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23817","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23817v1","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23817","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"pith_short_12","alias_value":"EYRCAIXS7WNN","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"pith_short_16","alias_value":"EYRCAIXS7WNN7UA5","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"pith_short_8","alias_value":"EYRCAIXS","created_at":"2026-07-05T11:12:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:EYRCAIXS7WNN7UA5XLIOMUJLGT","target":"record","payload":{"canonical_record":{"source":{"id":"2505.23817","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-27T21:36:27Z","cross_cats_sorted":[],"title_canon_sha256":"c7a624e6267dc8ed994a043a0a0a6615b379527dc6a85fadf8b547e2528cf57a","abstract_canon_sha256":"3e7276109f93814a32a94a0ab4d09899083a32b34c78bf8f19d9bda403a939d9"},"schema_version":"1.0"},"canonical_sha256":"26222022f2fd9adfd01dbad0e6512b34f520e8b735fc5ff82e8566b6231db953","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:12:35.872652Z","signature_b64":"C0cIqqOJ8rlYmForUrNUM7kcETlRIr7KWZuVdmVCY7gOKJb6JjV8B8qzyY1DFCzIT+KU5D4tvAsToAXp1WeEBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"26222022f2fd9adfd01dbad0e6512b34f520e8b735fc5ff82e8566b6231db953","last_reissued_at":"2026-07-05T11:12:35.872135Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:12:35.872135Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.23817","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TGc5LElw3e+8XtURJNDa8vGef2vqliM9ElAwY1RU+MFdxA2USFHnFPwo9uN1Jc5pl0IjBZyNa0cAIgj9ikprDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T06:47:38.191714Z"},"content_sha256":"3c9bb6ed9017aa430709da9f0e0ff96396e5442bb7bbb789572c2a0afbeed3d1","schema_version":"1.0","event_id":"sha256:3c9bb6ed9017aa430709da9f0e0ff96396e5442bb7bbb789572c2a0afbeed3d1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:EYRCAIXS7WNN7UA5XLIOMUJLGT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"System Prompt Extraction Attacks and Defenses in Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Badhan Chandra Das, M. Hadi Amini, Yanzhao Wu","submitted_at":"2025-05-27T21:36:27Z","abstract_excerpt":"The system prompt in Large Language Models (LLMs) plays a pivotal role in guiding model behavior and response generation. Often containing private configuration details, user roles, and operational instructions, the system prompt has become an emerging attack target. Recent studies have shown that LLM system prompts are highly susceptible to extraction attacks through meticulously designed queries, raising significant privacy and security concerns. Despite the growing threat, there is a lack of systematic studies of system prompt extraction attacks and defenses. In this paper, we present a com"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23817","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.23817/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:12:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xcwxODoLwuVBI4uIrrdPQaj8VV3bdp2e79ONVjBdD0PhuUTFZXxzZVcdro9r3kyKbptK/YBIJW6IvKaMCHPIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T06:47:38.192482Z"},"content_sha256":"7fa598d477572ad62bf42360e1f797cf06cf9f21d0925b08f99cc782d5a861a8","schema_version":"1.0","event_id":"sha256:7fa598d477572ad62bf42360e1f797cf06cf9f21d0925b08f99cc782d5a861a8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT/bundle.json","state_url":"https://pith.science/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T06:47:38Z","links":{"resolver":"https://pith.science/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT","bundle":"https://pith.science/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT/bundle.json","state":"https://pith.science/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EYRCAIXS7WNN7UA5XLIOMUJLGT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:EYRCAIXS7WNN7UA5XLIOMUJLGT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e7276109f93814a32a94a0ab4d09899083a32b34c78bf8f19d9bda403a939d9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-27T21:36:27Z","title_canon_sha256":"c7a624e6267dc8ed994a043a0a0a6615b379527dc6a85fadf8b547e2528cf57a"},"schema_version":"1.0","source":{"id":"2505.23817","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.23817","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.23817v1","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.23817","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"pith_short_12","alias_value":"EYRCAIXS7WNN","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"pith_short_16","alias_value":"EYRCAIXS7WNN7UA5","created_at":"2026-07-05T11:12:35Z"},{"alias_kind":"pith_short_8","alias_value":"EYRCAIXS","created_at":"2026-07-05T11:12:35Z"}],"graph_snapshots":[{"event_id":"sha256:7fa598d477572ad62bf42360e1f797cf06cf9f21d0925b08f99cc782d5a861a8","target":"graph","created_at":"2026-07-05T11:12:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.23817/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The system prompt in Large Language Models (LLMs) plays a pivotal role in guiding model behavior and response generation. Often containing private configuration details, user roles, and operational instructions, the system prompt has become an emerging attack target. Recent studies have shown that LLM system prompts are highly susceptible to extraction attacks through meticulously designed queries, raising significant privacy and security concerns. Despite the growing threat, there is a lack of systematic studies of system prompt extraction attacks and defenses. In this paper, we present a com","authors_text":"Badhan Chandra Das, M. Hadi Amini, Yanzhao Wu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-27T21:36:27Z","title":"System Prompt Extraction Attacks and Defenses in Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.23817","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c9bb6ed9017aa430709da9f0e0ff96396e5442bb7bbb789572c2a0afbeed3d1","target":"record","created_at":"2026-07-05T11:12:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e7276109f93814a32a94a0ab4d09899083a32b34c78bf8f19d9bda403a939d9","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-27T21:36:27Z","title_canon_sha256":"c7a624e6267dc8ed994a043a0a0a6615b379527dc6a85fadf8b547e2528cf57a"},"schema_version":"1.0","source":{"id":"2505.23817","kind":"arxiv","version":1}},"canonical_sha256":"26222022f2fd9adfd01dbad0e6512b34f520e8b735fc5ff82e8566b6231db953","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"26222022f2fd9adfd01dbad0e6512b34f520e8b735fc5ff82e8566b6231db953","first_computed_at":"2026-07-05T11:12:35.872135Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:12:35.872135Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"C0cIqqOJ8rlYmForUrNUM7kcETlRIr7KWZuVdmVCY7gOKJb6JjV8B8qzyY1DFCzIT+KU5D4tvAsToAXp1WeEBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:12:35.872652Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.23817","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c9bb6ed9017aa430709da9f0e0ff96396e5442bb7bbb789572c2a0afbeed3d1","sha256:7fa598d477572ad62bf42360e1f797cf06cf9f21d0925b08f99cc782d5a861a8"],"state_sha256":"76c6c5a8f8933c258f46fdf6e16f4fa763e11e18decd4909f42b9c9dc1e7b69e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mvZexdaoWOCKToUyagLPeQBLKMVhwAn0kxVRhOnidqV7trMTmjBBQIjd/O9NU9naHNItHmpxCpGUUNjNz1IbDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T06:47:38.198423Z","bundle_sha256":"0575beaa98652d5b21ae207b6dc4f0d1d9f758b3978d6cd63a7a5d608db1377d"}}