{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:IU6ZM35RVQKQFPYHG2OITUOJSM","short_pith_number":"pith:IU6ZM35R","canonical_record":{"source":{"id":"2607.27294","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-29T15:55:45Z","cross_cats_sorted":[],"title_canon_sha256":"8b7f4aabd0b27df63be84cde6a6e3e9f89449fc5b0e477de7276bc49bcf3896d","abstract_canon_sha256":"6179825e40dad6d5c5ea127883ede4cbc7fa756c9c3eabe0e8c15a9f30128fa2"},"schema_version":"1.0"},"canonical_sha256":"453d966fb1ac1502bf07369c89d1c99304a5c98bcf9b229d6920bd5e97ac406d","source":{"kind":"arxiv","id":"2607.27294","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.27294","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"arxiv_version","alias_value":"2607.27294v1","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.27294","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"pith_short_12","alias_value":"IU6ZM35RVQKQ","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"pith_short_16","alias_value":"IU6ZM35RVQKQFPYH","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"pith_short_8","alias_value":"IU6ZM35R","created_at":"2026-07-31T00:10:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:IU6ZM35RVQKQFPYHG2OITUOJSM","target":"record","payload":{"canonical_record":{"source":{"id":"2607.27294","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-29T15:55:45Z","cross_cats_sorted":[],"title_canon_sha256":"8b7f4aabd0b27df63be84cde6a6e3e9f89449fc5b0e477de7276bc49bcf3896d","abstract_canon_sha256":"6179825e40dad6d5c5ea127883ede4cbc7fa756c9c3eabe0e8c15a9f30128fa2"},"schema_version":"1.0"},"canonical_sha256":"453d966fb1ac1502bf07369c89d1c99304a5c98bcf9b229d6920bd5e97ac406d","receipt":{"kind":"pith_receipt","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"453d966fb1ac1502bf07369c89d1c99304a5c98bcf9b229d6920bd5e97ac406d","last_reissued_at":"2026-07-31T00:10:31.658205Z","signature_status":"unsigned_v0","first_computed_at":"2026-07-31T00:10:31.658205Z"},"source_kind":"arxiv","source_id":"2607.27294","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-31T00:10:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"htcy+34mY9Hyl4bB4fqX6MZMNbdi69oN439SS74SK1bdj52bclUtoqcv1r0Fsn4lnvkqgNBIPeHs0HqRQ9U5AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T21:04:48.365852Z"},"content_sha256":"d524790a754dcbd2884556073a658f408ad0cd3179ee5c23cadec102de6ffdc1","schema_version":"1.0","event_id":"sha256:d524790a754dcbd2884556073a658f408ad0cd3179ee5c23cadec102de6ffdc1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:IU6ZM35RVQKQFPYHG2OITUOJSM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AgentS4D: Benchmarking Runtime Risks across the Execution Lifecycle of LLM-Based Workspace Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Jiajun Zhou, Jihang Ye, Qi Xuan, Shanqing Yu, Xuanze Chen, Zhaoxuan Ke","submitted_at":"2026-07-29T15:55:45Z","abstract_excerpt":"Large language model (LLM)-based workspace agents execute stateful, multi-step workflows across heterogeneous resources, external tools, and persistent state. Their safety must therefore be assessed from actions, side effects, and state changes throughout execution. Although recent benchmarks have advanced executable safety testing and trajectory-aware verification, they rarely provide a unified account of where risks enter, how they elicit unsafe behavior, which harms they target, and where supporting evidence appears during execution. We introduce AgentS4D, a sandboxed benchmark for lifecycl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.27294","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.27294/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-31T00:10:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uvqf09nu59PVsS/EEjSjU1GJgynZIvQyYozZId4xp5xRpMFnqjNgqApiGBAjZNlZc/Fc1nJEPiglYlmEjRduBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T21:04:48.366355Z"},"content_sha256":"874b1d428e0d049f5c47c0207ec28cdfc1629e8057cf27d030ff84712dd37761","schema_version":"1.0","event_id":"sha256:874b1d428e0d049f5c47c0207ec28cdfc1629e8057cf27d030ff84712dd37761"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IU6ZM35RVQKQFPYHG2OITUOJSM/bundle.json","state_url":"https://pith.science/pith/IU6ZM35RVQKQFPYHG2OITUOJSM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IU6ZM35RVQKQFPYHG2OITUOJSM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T21:04:48Z","links":{"resolver":"https://pith.science/pith/IU6ZM35RVQKQFPYHG2OITUOJSM","bundle":"https://pith.science/pith/IU6ZM35RVQKQFPYHG2OITUOJSM/bundle.json","state":"https://pith.science/pith/IU6ZM35RVQKQFPYHG2OITUOJSM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IU6ZM35RVQKQFPYHG2OITUOJSM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:IU6ZM35RVQKQFPYHG2OITUOJSM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6179825e40dad6d5c5ea127883ede4cbc7fa756c9c3eabe0e8c15a9f30128fa2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-29T15:55:45Z","title_canon_sha256":"8b7f4aabd0b27df63be84cde6a6e3e9f89449fc5b0e477de7276bc49bcf3896d"},"schema_version":"1.0","source":{"id":"2607.27294","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.27294","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"arxiv_version","alias_value":"2607.27294v1","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.27294","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"pith_short_12","alias_value":"IU6ZM35RVQKQ","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"pith_short_16","alias_value":"IU6ZM35RVQKQFPYH","created_at":"2026-07-31T00:10:31Z"},{"alias_kind":"pith_short_8","alias_value":"IU6ZM35R","created_at":"2026-07-31T00:10:31Z"}],"graph_snapshots":[{"event_id":"sha256:874b1d428e0d049f5c47c0207ec28cdfc1629e8057cf27d030ff84712dd37761","target":"graph","created_at":"2026-07-31T00:10:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.27294/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language model (LLM)-based workspace agents execute stateful, multi-step workflows across heterogeneous resources, external tools, and persistent state. Their safety must therefore be assessed from actions, side effects, and state changes throughout execution. Although recent benchmarks have advanced executable safety testing and trajectory-aware verification, they rarely provide a unified account of where risks enter, how they elicit unsafe behavior, which harms they target, and where supporting evidence appears during execution. We introduce AgentS4D, a sandboxed benchmark for lifecycl","authors_text":"Jiajun Zhou, Jihang Ye, Qi Xuan, Shanqing Yu, Xuanze Chen, Zhaoxuan Ke","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-29T15:55:45Z","title":"AgentS4D: Benchmarking Runtime Risks across the Execution Lifecycle of LLM-Based Workspace Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.27294","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d524790a754dcbd2884556073a658f408ad0cd3179ee5c23cadec102de6ffdc1","target":"record","created_at":"2026-07-31T00:10:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6179825e40dad6d5c5ea127883ede4cbc7fa756c9c3eabe0e8c15a9f30128fa2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-07-29T15:55:45Z","title_canon_sha256":"8b7f4aabd0b27df63be84cde6a6e3e9f89449fc5b0e477de7276bc49bcf3896d"},"schema_version":"1.0","source":{"id":"2607.27294","kind":"arxiv","version":1}},"canonical_sha256":"453d966fb1ac1502bf07369c89d1c99304a5c98bcf9b229d6920bd5e97ac406d","receipt":{"builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"453d966fb1ac1502bf07369c89d1c99304a5c98bcf9b229d6920bd5e97ac406d","first_computed_at":"2026-07-31T00:10:31.658205Z","kind":"pith_receipt","last_reissued_at":"2026-07-31T00:10:31.658205Z","receipt_version":"0.3","signature_status":"unsigned_v0"},"source_id":"2607.27294","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d524790a754dcbd2884556073a658f408ad0cd3179ee5c23cadec102de6ffdc1","sha256:874b1d428e0d049f5c47c0207ec28cdfc1629e8057cf27d030ff84712dd37761"],"state_sha256":"ec9d705262b3e688cb53d787a262814afc73d9fca5f0acd843eb7efead6e1101"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Sp8sCS3oTzEsm4Eczd/xBgmZTMiyEqKWRBVr2xP3CjBb22+wHOJhrh8t1AkOp/hGd3opJUtVOFOQ7zkIsizTBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T21:04:48.402112Z","bundle_sha256":"e1827f4f0ba11182ef4df6ff6e53325ed2a20d69dd2afebdfe6ddae6d6f06622"}}