{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:GGDY2ST3RDGVXMQ6IBGSD2QCQA","short_pith_number":"pith:GGDY2ST3","canonical_record":{"source":{"id":"2606.21129","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T06:14:37Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"95ff58e7d3175705bd11c1bae9100bea6a49384c5ecff00d199c34d8ab84d432","abstract_canon_sha256":"772613a9f22e8cd17b78eeeaea15941de68c3ffa1fb5323a75d9b3b10dfa2a5a"},"schema_version":"1.0"},"canonical_sha256":"31878d4a7b88cd5bb21e404d21ea028039e832c01ded99c16c1c0cfaecde1597","source":{"kind":"arxiv","id":"2606.21129","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21129","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21129v1","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21129","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"pith_short_12","alias_value":"GGDY2ST3RDGV","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"pith_short_16","alias_value":"GGDY2ST3RDGVXMQ6","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"pith_short_8","alias_value":"GGDY2ST3","created_at":"2026-06-23T01:12:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:GGDY2ST3RDGVXMQ6IBGSD2QCQA","target":"record","payload":{"canonical_record":{"source":{"id":"2606.21129","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T06:14:37Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"95ff58e7d3175705bd11c1bae9100bea6a49384c5ecff00d199c34d8ab84d432","abstract_canon_sha256":"772613a9f22e8cd17b78eeeaea15941de68c3ffa1fb5323a75d9b3b10dfa2a5a"},"schema_version":"1.0"},"canonical_sha256":"31878d4a7b88cd5bb21e404d21ea028039e832c01ded99c16c1c0cfaecde1597","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T01:12:30.878524Z","signature_b64":"Fvlj8EYdYN5smN98xMVrEqHUWWaVgVfa8iDvf47eyXSAVKIa/uajcheBjujT93Vuy2hR4NHRHLfwbN3akyCGDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"31878d4a7b88cd5bb21e404d21ea028039e832c01ded99c16c1c0cfaecde1597","last_reissued_at":"2026-06-23T01:12:30.878051Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T01:12:30.878051Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.21129","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:12:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NcYQQhYTPkyfOoxhZWEkY9Qm9hdA/BawPF30WvD5hrC9Nn39bMLdu41UtINV5l3Fk+md3b/2UjM54nT0XomkBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T22:02:04.558499Z"},"content_sha256":"b85f9dc05800a23c6e73fcef732a89b764835b8b27bc3539ed167ee68982240a","schema_version":"1.0","event_id":"sha256:b85f9dc05800a23c6e73fcef732a89b764835b8b27bc3539ed167ee68982240a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:GGDY2ST3RDGVXMQ6IBGSD2QCQA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AgenticOS: An Intent-Oriented Secure Operating System Architecture for Autonomous AI Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Jia Wang, Jiexin Gao, Songqiao Tao, Xin Cheng, Yanpeng Zhu, Yu Zhang, Zhen Zhao","submitted_at":"2026-06-19T06:14:37Z","abstract_excerpt":"Traditional OS security models based on \"resource exposure plus permission checks\" face structural challenges as LLM-driven autonomous agents acquire capabilities for planning, tool use, network access, and code execution. Once an agent runtime is compromised through prompt injection or malicious tool outputs, an attacker can compose POSIX-style resource primitives into behaviors far beyond the user's task authorization. To address this, we propose AgenticOS, an intent-oriented secure OS architecture that consolidates delegable, auditable software capabilities into OS-native ones rather than r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21129","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.21129/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:12:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XCJ6mNuJozLE8/SXCq/ft3MTHIN654gHhAF7UTpnDGxcGwOqiTFoKuKQfNlntDTwIt9U4zUyLLDig2u4FVJGAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T22:02:04.558873Z"},"content_sha256":"b3dce6cec220b9a5389cdc81f22227722bdf4effa8ce138af436ec40db5cca98","schema_version":"1.0","event_id":"sha256:b3dce6cec220b9a5389cdc81f22227722bdf4effa8ce138af436ec40db5cca98"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA/bundle.json","state_url":"https://pith.science/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-19T22:02:04Z","links":{"resolver":"https://pith.science/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA","bundle":"https://pith.science/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA/bundle.json","state":"https://pith.science/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GGDY2ST3RDGVXMQ6IBGSD2QCQA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:GGDY2ST3RDGVXMQ6IBGSD2QCQA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"772613a9f22e8cd17b78eeeaea15941de68c3ffa1fb5323a75d9b3b10dfa2a5a","cross_cats_sorted":["cs.OS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T06:14:37Z","title_canon_sha256":"95ff58e7d3175705bd11c1bae9100bea6a49384c5ecff00d199c34d8ab84d432"},"schema_version":"1.0","source":{"id":"2606.21129","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21129","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21129v1","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21129","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"pith_short_12","alias_value":"GGDY2ST3RDGV","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"pith_short_16","alias_value":"GGDY2ST3RDGVXMQ6","created_at":"2026-06-23T01:12:30Z"},{"alias_kind":"pith_short_8","alias_value":"GGDY2ST3","created_at":"2026-06-23T01:12:30Z"}],"graph_snapshots":[{"event_id":"sha256:b3dce6cec220b9a5389cdc81f22227722bdf4effa8ce138af436ec40db5cca98","target":"graph","created_at":"2026-06-23T01:12:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.21129/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Traditional OS security models based on \"resource exposure plus permission checks\" face structural challenges as LLM-driven autonomous agents acquire capabilities for planning, tool use, network access, and code execution. Once an agent runtime is compromised through prompt injection or malicious tool outputs, an attacker can compose POSIX-style resource primitives into behaviors far beyond the user's task authorization. To address this, we propose AgenticOS, an intent-oriented secure OS architecture that consolidates delegable, auditable software capabilities into OS-native ones rather than r","authors_text":"Jia Wang, Jiexin Gao, Songqiao Tao, Xin Cheng, Yanpeng Zhu, Yu Zhang, Zhen Zhao","cross_cats":["cs.OS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T06:14:37Z","title":"AgenticOS: An Intent-Oriented Secure Operating System Architecture for Autonomous AI Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21129","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b85f9dc05800a23c6e73fcef732a89b764835b8b27bc3539ed167ee68982240a","target":"record","created_at":"2026-06-23T01:12:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"772613a9f22e8cd17b78eeeaea15941de68c3ffa1fb5323a75d9b3b10dfa2a5a","cross_cats_sorted":["cs.OS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T06:14:37Z","title_canon_sha256":"95ff58e7d3175705bd11c1bae9100bea6a49384c5ecff00d199c34d8ab84d432"},"schema_version":"1.0","source":{"id":"2606.21129","kind":"arxiv","version":1}},"canonical_sha256":"31878d4a7b88cd5bb21e404d21ea028039e832c01ded99c16c1c0cfaecde1597","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"31878d4a7b88cd5bb21e404d21ea028039e832c01ded99c16c1c0cfaecde1597","first_computed_at":"2026-06-23T01:12:30.878051Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T01:12:30.878051Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Fvlj8EYdYN5smN98xMVrEqHUWWaVgVfa8iDvf47eyXSAVKIa/uajcheBjujT93Vuy2hR4NHRHLfwbN3akyCGDQ==","signature_status":"signed_v1","signed_at":"2026-06-23T01:12:30.878524Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.21129","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b85f9dc05800a23c6e73fcef732a89b764835b8b27bc3539ed167ee68982240a","sha256:b3dce6cec220b9a5389cdc81f22227722bdf4effa8ce138af436ec40db5cca98"],"state_sha256":"e405a185b1a830661f28813d04a3607e4d5b0087bf2849c133a4bb0941c1e77e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dej66Tnq5KKZSjeVvQWI3gQm2MPv3jkd9h/VSXu4FDFQ4yW2NqDlIgaY6oYTGVwqWcYg5hhTXaFEWAGQ9Z+PAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-19T22:02:04.561044Z","bundle_sha256":"bd071a0791504da16965b1912a5b7211d58b604b2a3a64fe5a9a6095e90ae7b9"}}