{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:F3XEOFBCVSKGE6XWAUAG4P4CIU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0a0616494c3d3dd56de4a3927262777560522a4225675d939f136ef2ca850423","cross_cats_sorted":["cs.AI","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2025-12-29T01:09:10Z","title_canon_sha256":"91d36aad45574c7f7256dcf78addd5886a052eda40c349bada47f6f0558e3c8b"},"schema_version":"1.0","source":{"id":"2512.23128","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2512.23128","created_at":"2026-06-08T01:03:54Z"},{"alias_kind":"arxiv_version","alias_value":"2512.23128v2","created_at":"2026-06-08T01:03:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2512.23128","created_at":"2026-06-08T01:03:54Z"},{"alias_kind":"pith_short_12","alias_value":"F3XEOFBCVSKG","created_at":"2026-06-08T01:03:54Z"},{"alias_kind":"pith_short_16","alias_value":"F3XEOFBCVSKGE6XW","created_at":"2026-06-08T01:03:54Z"},{"alias_kind":"pith_short_8","alias_value":"F3XEOFBC","created_at":"2026-06-08T01:03:54Z"}],"graph_snapshots":[{"event_id":"sha256:d2c16d831f2185dabc9c3ec9428407117fe73233fa776b8bab07ce52de68c7ad","target":"graph","created_at":"2026-06-08T01:03:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2512.23128/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Web-based agents powered by large language models are increasingly used for tasks such as email management or professional networking. Their reliance on dynamic web content, however, makes them vulnerable to prompt injection attacks: adversarial instructions hidden in interface elements that persuade the agent to divert from its original task. We introduce the Task-Redirecting Agent Persuasion Benchmark (TRAP), a benchmark for studying how persuasion techniques misguide autonomous web agents on realistic tasks. Across six frontier models, agents are susceptible to prompt injection in 25% of ta","authors_text":"Adam Mahdi, Adel Bibi, Arkadiusz Drohomirecki, Chris Russell, Karolina Korgul, Lukas Aichberger, Philip H.S. Torr, Piotr B{\\l}aszczyk, Will Howard, Yushi Yang","cross_cats":["cs.AI","cs.MA"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2025-12-29T01:09:10Z","title":"It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2512.23128","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:476f3b3450ecf8810a2a5d43337a73dc52bba37ee894a049566f3b3c58fb3f85","target":"record","created_at":"2026-06-08T01:03:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0a0616494c3d3dd56de4a3927262777560522a4225675d939f136ef2ca850423","cross_cats_sorted":["cs.AI","cs.MA"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.HC","submitted_at":"2025-12-29T01:09:10Z","title_canon_sha256":"91d36aad45574c7f7256dcf78addd5886a052eda40c349bada47f6f0558e3c8b"},"schema_version":"1.0","source":{"id":"2512.23128","kind":"arxiv","version":2}},"canonical_sha256":"2eee471422ac94627af605006e3f82451f94690308498146a5724ce7088192b5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2eee471422ac94627af605006e3f82451f94690308498146a5724ce7088192b5","first_computed_at":"2026-06-08T01:03:54.431456Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-08T01:03:54.431456Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IwJVn/MiOKhut8aFN+m5wRPIdH3pHJUMqeqIZrZHiiTNswG66xdY2EcsJAbijL6xm5+ZMDUPfgYQOR10jLB4Bw==","signature_status":"signed_v1","signed_at":"2026-06-08T01:03:54.432371Z","signed_message":"canonical_sha256_bytes"},"source_id":"2512.23128","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:476f3b3450ecf8810a2a5d43337a73dc52bba37ee894a049566f3b3c58fb3f85","sha256:d2c16d831f2185dabc9c3ec9428407117fe73233fa776b8bab07ce52de68c7ad"],"state_sha256":"42c50663339ddfbb4d45a3c233fbe5e2cef3ae0c151fde982226ba74c77bd89a"}