{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:I2G6EECYYEOWPDNXQEEAVYPJQ6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a8a1a0093e92e2b96b0f6a6c64752e5cd63ca8d06e3f69ce5e2cdb1282fd96e6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-20T19:11:17Z","title_canon_sha256":"7167b3eb06e049400590ee13d7f954c5c3284866ad9fe216047be77c434aadba"},"schema_version":"1.0","source":{"id":"2607.19430","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.19430","created_at":"2026-07-23T00:23:49Z"},{"alias_kind":"arxiv_version","alias_value":"2607.19430v1","created_at":"2026-07-23T00:23:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.19430","created_at":"2026-07-23T00:23:49Z"},{"alias_kind":"pith_short_12","alias_value":"I2G6EECYYEOW","created_at":"2026-07-23T00:23:49Z"},{"alias_kind":"pith_short_16","alias_value":"I2G6EECYYEOWPDNX","created_at":"2026-07-23T00:23:49Z"},{"alias_kind":"pith_short_8","alias_value":"I2G6EECY","created_at":"2026-07-23T00:23:49Z"}],"graph_snapshots":[{"event_id":"sha256:d20b738a51b9b98568a604143f7006ca61e00d9b68d5076bc0df9257b2e81e33","target":"graph","created_at":"2026-07-23T00:23:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.19430/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-agent LLM applications chain a planner, worker agents, a verifier, and a synthesizer, and every hop between agents is an unmonitored channel through which an adversary can smuggle instructions. Existing defenses guard only the input boundary (IBProtector, Llama Guard, perplexity filters, SmoothLLM) or run outside the application as opaque, stochastic provider-side filters. We show this gap carries a consequence rarely measured: on a 2,100-trace evaluation across eight attack families, five defenses, and three model backends, an undefended pipeline that appears fully safe under standard r","authors_text":"Elias Hossain, Fatema Tuj Johora Faria, Maleeha Sheikh, Md Mehedi Hasan Nipu, Tasfia Nuzhat Ornee","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-20T19:11:17Z","title":"ChannelGuard: Safe Models Do Not Compose into Safe Multi-Agent Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.19430","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c7b14176698287942edfe4fc316bc70da88bac478d3942b57db5f8e0b798774","target":"record","created_at":"2026-07-23T00:23:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a8a1a0093e92e2b96b0f6a6c64752e5cd63ca8d06e3f69ce5e2cdb1282fd96e6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-20T19:11:17Z","title_canon_sha256":"7167b3eb06e049400590ee13d7f954c5c3284866ad9fe216047be77c434aadba"},"schema_version":"1.0","source":{"id":"2607.19430","kind":"arxiv","version":1}},"canonical_sha256":"468de21058c11d678db781080ae1e987b926db600e7ed090c40bb01ab54191d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"468de21058c11d678db781080ae1e987b926db600e7ed090c40bb01ab54191d0","first_computed_at":"2026-07-23T00:23:49.525009Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-23T00:23:49.525009Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"O8REKgFiY40yTUe28eHffXmaOCTQ7NrpLWg0s8VPERatNN+sEERCsp7RmteAQ+IW+13Ou1JWV63FoJnwvRptDQ==","signature_status":"signed_v1","signed_at":"2026-07-23T00:23:49.525894Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.19430","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c7b14176698287942edfe4fc316bc70da88bac478d3942b57db5f8e0b798774","sha256:d20b738a51b9b98568a604143f7006ca61e00d9b68d5076bc0df9257b2e81e33"],"state_sha256":"0810b8b2134abcc93ecdab264d833d74dbf23bf6f09f13f43734d54fac117706"}