{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:H62FRBLWTWLI3DYEIJAPQXH7JB","short_pith_number":"pith:H62FRBLW","canonical_record":{"source":{"id":"2608.05430","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T21:44:44Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f97aca76b443ce4905e486930e532eac5a8079da1fbff6c2aa7a01116b0cb728","abstract_canon_sha256":"ef6756d9fcc43f51a8d5f041a8a2b4ab027e331ba11e2b1ac20d3c5fdba86c24"},"schema_version":"1.0"},"canonical_sha256":"3fb45885769d968d8f044240f85cff486969b866ed6bf5e136bd1ee0334285c1","source":{"kind":"arxiv","id":"2608.05430","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05430","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05430v1","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05430","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"pith_short_12","alias_value":"H62FRBLWTWLI","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"pith_short_16","alias_value":"H62FRBLWTWLI3DYE","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"pith_short_8","alias_value":"H62FRBLW","created_at":"2026-08-07T00:47:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:H62FRBLWTWLI3DYEIJAPQXH7JB","target":"record","payload":{"canonical_record":{"source":{"id":"2608.05430","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T21:44:44Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f97aca76b443ce4905e486930e532eac5a8079da1fbff6c2aa7a01116b0cb728","abstract_canon_sha256":"ef6756d9fcc43f51a8d5f041a8a2b4ab027e331ba11e2b1ac20d3c5fdba86c24"},"schema_version":"1.0"},"canonical_sha256":"3fb45885769d968d8f044240f85cff486969b866ed6bf5e136bd1ee0334285c1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-07T00:47:51.124765Z","signature_b64":"/4rF3PCa8RBZ+i6XktjxfAxT+JB4hrlUKMujrG2yo3VXp+Shut0GMSIpu0rdSOL8DupSkxzXMEqTD0sWadIlBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3fb45885769d968d8f044240f85cff486969b866ed6bf5e136bd1ee0334285c1","last_reissued_at":"2026-08-07T00:47:51.123406Z","signature_status":"signed_v1","first_computed_at":"2026-08-07T00:47:51.123406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.05430","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:47:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qb/5QtPJAOs/f7VXXcZ02dH7EHz+Zcik8do5SKxOnV8MI2VzxLV2wOIhFslizyeXPaU2ePxg0RNC0SRpaJouBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:09:46.498748Z"},"content_sha256":"10a6a85e746532b5470ad5e274c935442249121e78cde7c38f0a6e1daee22c72","schema_version":"1.0","event_id":"sha256:10a6a85e746532b5470ad5e274c935442249121e78cde7c38f0a6e1daee22c72"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:H62FRBLWTWLI3DYEIJAPQXH7JB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robust Context-Aware Detection of Malicious Instructions in Text","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Buzhao Liu, Xinhang Ma, Yevgeniy Vorobeychik","submitted_at":"2026-08-05T21:44:44Z","abstract_excerpt":"The remarkable instruction-following ability of modern LLMs has enabled their practical use as the minds of agents that can autonomously complete increasingly complex tasks. Therein, however, also lies their vulnerability to attacks which embed malicious instructions in text, common variants of which are known as indirect prompt injection (IPI). A fundamental task in addressing this vulnerability is successful segmentation of a given text into benign and malicious sentences (if any). While a number of approaches for this task have been proposed, no detector combines query-relative detection at"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05430","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.05430/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-07T00:47:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lobXr+5nU6M/MkbB3wkN8MiZVmSpcUVoHsSjMv/DBUQnNJR+v85TexRqa/e51Zse3QRwSCNEecXP9yBPCicRAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:09:46.499700Z"},"content_sha256":"e2fdc0560d6b91f28ffa7b201f2e550c45e9fd127d7e0550db37ea57a2509c8f","schema_version":"1.0","event_id":"sha256:e2fdc0560d6b91f28ffa7b201f2e550c45e9fd127d7e0550db37ea57a2509c8f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H62FRBLWTWLI3DYEIJAPQXH7JB/bundle.json","state_url":"https://pith.science/pith/H62FRBLWTWLI3DYEIJAPQXH7JB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H62FRBLWTWLI3DYEIJAPQXH7JB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T22:09:46Z","links":{"resolver":"https://pith.science/pith/H62FRBLWTWLI3DYEIJAPQXH7JB","bundle":"https://pith.science/pith/H62FRBLWTWLI3DYEIJAPQXH7JB/bundle.json","state":"https://pith.science/pith/H62FRBLWTWLI3DYEIJAPQXH7JB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H62FRBLWTWLI3DYEIJAPQXH7JB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:H62FRBLWTWLI3DYEIJAPQXH7JB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ef6756d9fcc43f51a8d5f041a8a2b4ab027e331ba11e2b1ac20d3c5fdba86c24","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T21:44:44Z","title_canon_sha256":"f97aca76b443ce4905e486930e532eac5a8079da1fbff6c2aa7a01116b0cb728"},"schema_version":"1.0","source":{"id":"2608.05430","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.05430","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"arxiv_version","alias_value":"2608.05430v1","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.05430","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"pith_short_12","alias_value":"H62FRBLWTWLI","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"pith_short_16","alias_value":"H62FRBLWTWLI3DYE","created_at":"2026-08-07T00:47:51Z"},{"alias_kind":"pith_short_8","alias_value":"H62FRBLW","created_at":"2026-08-07T00:47:51Z"}],"graph_snapshots":[{"event_id":"sha256:e2fdc0560d6b91f28ffa7b201f2e550c45e9fd127d7e0550db37ea57a2509c8f","target":"graph","created_at":"2026-08-07T00:47:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.05430/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The remarkable instruction-following ability of modern LLMs has enabled their practical use as the minds of agents that can autonomously complete increasingly complex tasks. Therein, however, also lies their vulnerability to attacks which embed malicious instructions in text, common variants of which are known as indirect prompt injection (IPI). A fundamental task in addressing this vulnerability is successful segmentation of a given text into benign and malicious sentences (if any). While a number of approaches for this task have been proposed, no detector combines query-relative detection at","authors_text":"Buzhao Liu, Xinhang Ma, Yevgeniy Vorobeychik","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T21:44:44Z","title":"Robust Context-Aware Detection of Malicious Instructions in Text"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.05430","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:10a6a85e746532b5470ad5e274c935442249121e78cde7c38f0a6e1daee22c72","target":"record","created_at":"2026-08-07T00:47:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ef6756d9fcc43f51a8d5f041a8a2b4ab027e331ba11e2b1ac20d3c5fdba86c24","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T21:44:44Z","title_canon_sha256":"f97aca76b443ce4905e486930e532eac5a8079da1fbff6c2aa7a01116b0cb728"},"schema_version":"1.0","source":{"id":"2608.05430","kind":"arxiv","version":1}},"canonical_sha256":"3fb45885769d968d8f044240f85cff486969b866ed6bf5e136bd1ee0334285c1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3fb45885769d968d8f044240f85cff486969b866ed6bf5e136bd1ee0334285c1","first_computed_at":"2026-08-07T00:47:51.123406Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-07T00:47:51.123406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/4rF3PCa8RBZ+i6XktjxfAxT+JB4hrlUKMujrG2yo3VXp+Shut0GMSIpu0rdSOL8DupSkxzXMEqTD0sWadIlBA==","signature_status":"signed_v1","signed_at":"2026-08-07T00:47:51.124765Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.05430","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:10a6a85e746532b5470ad5e274c935442249121e78cde7c38f0a6e1daee22c72","sha256:e2fdc0560d6b91f28ffa7b201f2e550c45e9fd127d7e0550db37ea57a2509c8f"],"state_sha256":"aa0aafaa0799d02b23419b55ca2f3f3943a695d2bbe010e79b7dd9427a083a92"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QZo9Yqk+rhVm17mfKCCb85vlGgsL+00KNhFkLnYmbU/kKmBhGC8TIEo0/qeFPx+xmOjabfb8zkemRFEWMoR0DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T22:09:46.505961Z","bundle_sha256":"66694994f81870335ae969e9b794a2c0821dfd2d9be9dd8b3659899913f664c8"}}