Pith Number

pith:IW7J2RLI

pith:2025:IW7J2RLIX4H7TBMRKLVS44MVNL

not attested not anchored not stored refs pending

Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents

Daniel Kang, Henil Shalin Panchal, Qiusi Zhan, Richard Fang

arxiv:2503.00061 v2 · 2025-02-27 · cs.CR · cs.LG

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{IW7J2RLIX4H7TBMRKLVS44MVNL}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

6 papers in Pith

GIF: Locally Sound Geometric Information Flow Control for LLMs

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense

Adversarial Feeds Steer LLM Agent Decisions Against Their Defaults

Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection

Prompt Injection as Role Confusion

Receipt and verification

First computed	2026-07-05T10:23:30.395407Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

45be9d4568bf0ff9859152eb2e71956af0e12ac7a213e8293b31b906acf9425c

Aliases

arxiv: 2503.00061 · arxiv_version: 2503.00061v2 · doi: 10.48550/arxiv.2503.00061 · pith_short_12: IW7J2RLIX4H7 · pith_short_16: IW7J2RLIX4H7TBMR · pith_short_8: IW7J2RLI

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/IW7J2RLIX4H7TBMRKLVS44MVNL \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 45be9d4568bf0ff9859152eb2e71956af0e12ac7a213e8293b31b906acf9425c

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "acc331f66e7c14f673537482511e4c86417dd92c8aedc27e34d3be96cca6a162",
    "cross_cats_sorted": [
      "cs.LG"
    ],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2025-02-27T04:04:50Z",
    "title_canon_sha256": "05a66c80de22e14475e1e9a710f58730e6d4bafff3a0c6bd91b5f553bc8e2d25"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2503.00061",
    "kind": "arxiv",
    "version": 2
  }
}