{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IINCAV4AHJQGDGXMOS7YUZ23P6","short_pith_number":"pith:IINCAV4A","canonical_record":{"source":{"id":"2410.05451","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-07T19:34:35Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f8be96acd1a7b956458b89ac4a8aa7e4d3f798bae9df1b2dbe8b8a771129c32a","abstract_canon_sha256":"138321758175bae353f2b4480ccd5d6f4388b43cca4d0a50d3425d5b595ab230"},"schema_version":"1.0"},"canonical_sha256":"421a2057803a60619aec74bf8a675b7f9d5da3b5bcec192672870df0992d4a09","source":{"kind":"arxiv","id":"2410.05451","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.05451","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"arxiv_version","alias_value":"2410.05451v3","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.05451","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"pith_short_12","alias_value":"IINCAV4AHJQG","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"pith_short_16","alias_value":"IINCAV4AHJQGDGXM","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"pith_short_8","alias_value":"IINCAV4A","created_at":"2026-07-05T11:31:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IINCAV4AHJQGDGXMOS7YUZ23P6","target":"record","payload":{"canonical_record":{"source":{"id":"2410.05451","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-07T19:34:35Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f8be96acd1a7b956458b89ac4a8aa7e4d3f798bae9df1b2dbe8b8a771129c32a","abstract_canon_sha256":"138321758175bae353f2b4480ccd5d6f4388b43cca4d0a50d3425d5b595ab230"},"schema_version":"1.0"},"canonical_sha256":"421a2057803a60619aec74bf8a675b7f9d5da3b5bcec192672870df0992d4a09","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:31:02.651008Z","signature_b64":"8OSaUzxQnYQa15sbCnOW8gB+O2NV5z2+/cnpWEDnOg5l1fXfTWXpXYMI3LN1Pa3PXkPkiTNxmXTfrnNIT0JAAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"421a2057803a60619aec74bf8a675b7f9d5da3b5bcec192672870df0992d4a09","last_reissued_at":"2026-07-05T11:31:02.650489Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:31:02.650489Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.05451","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2DYP8wh8XsKv+OKX8X5Kwxxf4pv9zp9KVu/WTZV1IMYQnE1YXP2Akz4qSiXhNjnqqTilJRijiMErSWMrbDziCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T21:00:11.575624Z"},"content_sha256":"a8973959d8fdd2201b788c5b33d57b4eb9aba22fc06a59fe43c1c703c0d8d72c","schema_version":"1.0","event_id":"sha256:a8973959d8fdd2201b788c5b33d57b4eb9aba22fc06a59fe43c1c703c0d8d72c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IINCAV4AHJQGDGXMOS7YUZ23P6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Arman Zharmagambetov, Chuan Guo, David Wagner, Kamalika Chaudhuri, Saeed Mahloujifar, Sizhe Chen","submitted_at":"2024-10-07T19:34:35Z","abstract_excerpt":"Large language models (LLMs) are becoming increasingly prevalent in modern software systems, interfacing between the user and the Internet to assist with tasks that require advanced language understanding. To accomplish these tasks, the LLM often uses external data sources such as user documents, web retrieval, results from API calls, etc. This opens up new avenues for attackers to manipulate the LLM via prompt injection. Adversarial prompts can be injected into external data sources to override the system's intended instruction and instead execute a malicious instruction. To mitigate this vul"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.05451","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.05451/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JH6TjKitQbxRh5KVJwc6cr1VdEpGxbav5HQBq18eMQQebUCZhtE+JhyXc/cJ9j8jYh4ADoUO4tEKRU6di2/bCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T21:00:11.576593Z"},"content_sha256":"e6af6fd6b99bf84636e93d28988b99273e43267c6ed0e67786eaa1320f539c80","schema_version":"1.0","event_id":"sha256:e6af6fd6b99bf84636e93d28988b99273e43267c6ed0e67786eaa1320f539c80"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IINCAV4AHJQGDGXMOS7YUZ23P6/bundle.json","state_url":"https://pith.science/pith/IINCAV4AHJQGDGXMOS7YUZ23P6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IINCAV4AHJQGDGXMOS7YUZ23P6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T21:00:11Z","links":{"resolver":"https://pith.science/pith/IINCAV4AHJQGDGXMOS7YUZ23P6","bundle":"https://pith.science/pith/IINCAV4AHJQGDGXMOS7YUZ23P6/bundle.json","state":"https://pith.science/pith/IINCAV4AHJQGDGXMOS7YUZ23P6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IINCAV4AHJQGDGXMOS7YUZ23P6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IINCAV4AHJQGDGXMOS7YUZ23P6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"138321758175bae353f2b4480ccd5d6f4388b43cca4d0a50d3425d5b595ab230","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-07T19:34:35Z","title_canon_sha256":"f8be96acd1a7b956458b89ac4a8aa7e4d3f798bae9df1b2dbe8b8a771129c32a"},"schema_version":"1.0","source":{"id":"2410.05451","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.05451","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"arxiv_version","alias_value":"2410.05451v3","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.05451","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"pith_short_12","alias_value":"IINCAV4AHJQG","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"pith_short_16","alias_value":"IINCAV4AHJQGDGXM","created_at":"2026-07-05T11:31:02Z"},{"alias_kind":"pith_short_8","alias_value":"IINCAV4A","created_at":"2026-07-05T11:31:02Z"}],"graph_snapshots":[{"event_id":"sha256:e6af6fd6b99bf84636e93d28988b99273e43267c6ed0e67786eaa1320f539c80","target":"graph","created_at":"2026-07-05T11:31:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.05451/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are becoming increasingly prevalent in modern software systems, interfacing between the user and the Internet to assist with tasks that require advanced language understanding. To accomplish these tasks, the LLM often uses external data sources such as user documents, web retrieval, results from API calls, etc. This opens up new avenues for attackers to manipulate the LLM via prompt injection. Adversarial prompts can be injected into external data sources to override the system's intended instruction and instead execute a malicious instruction. To mitigate this vul","authors_text":"Arman Zharmagambetov, Chuan Guo, David Wagner, Kamalika Chaudhuri, Saeed Mahloujifar, Sizhe Chen","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-07T19:34:35Z","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.05451","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a8973959d8fdd2201b788c5b33d57b4eb9aba22fc06a59fe43c1c703c0d8d72c","target":"record","created_at":"2026-07-05T11:31:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"138321758175bae353f2b4480ccd5d6f4388b43cca4d0a50d3425d5b595ab230","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-07T19:34:35Z","title_canon_sha256":"f8be96acd1a7b956458b89ac4a8aa7e4d3f798bae9df1b2dbe8b8a771129c32a"},"schema_version":"1.0","source":{"id":"2410.05451","kind":"arxiv","version":3}},"canonical_sha256":"421a2057803a60619aec74bf8a675b7f9d5da3b5bcec192672870df0992d4a09","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"421a2057803a60619aec74bf8a675b7f9d5da3b5bcec192672870df0992d4a09","first_computed_at":"2026-07-05T11:31:02.650489Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:31:02.650489Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8OSaUzxQnYQa15sbCnOW8gB+O2NV5z2+/cnpWEDnOg5l1fXfTWXpXYMI3LN1Pa3PXkPkiTNxmXTfrnNIT0JAAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:31:02.651008Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.05451","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a8973959d8fdd2201b788c5b33d57b4eb9aba22fc06a59fe43c1c703c0d8d72c","sha256:e6af6fd6b99bf84636e93d28988b99273e43267c6ed0e67786eaa1320f539c80"],"state_sha256":"0c348d38343660e2dc1c3c844d92e7df7d6e18b94d92301af7feab29be06b9bc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fyUJDLUW3dS0U4ouPGP518UtrLODlKhX415HLKmJrMvKMbIuOcRq250QsTXWJfd+SJINit//PnheyFewvuTzBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T21:00:11.582508Z","bundle_sha256":"bd35da7137de62ca42a9c44e62e6560e92ffe654a9769bab3efdf670174b9a6d"}}