{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:J7E5LM5SZYCTJLMN5DADNOF35T","short_pith_number":"pith:J7E5LM5S","schema_version":"1.0","canonical_sha256":"4fc9d5b3b2ce0534ad8de8c036b8bbecd5afc5a8583ab438a96da867240198c1","source":{"kind":"arxiv","id":"2606.02483","version":1},"attestation_state":"computed","paper":{"title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Akhil Arora, Bardia Mohammadi, Lars Klein, Laurent Bindschaedler","submitted_at":"2026-06-01T16:53:19Z","abstract_excerpt":"Tool-augmented language agents speculatively issue likely future tool calls to hide latency, but those calls leak inferred user intent to external services before the agent commits to the branch. Every external observer that received the call retains the disclosure after the agent abandons the branch. Timing is the issue, not authorization: no commit-time cleanup, read-only restriction, or access-control allow-list unsends what an observer already holds. We call these invocations ghost tool calls and propose Speculative Tool Privacy Contracts, a runtime abstraction that treats observation befo"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.02483","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-01T16:53:19Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"1f71f12eee01804689732c48e5c8d6b5cf5cd8b356ff27f93f61af212a024e8a","abstract_canon_sha256":"645290748fb160a6d8ef12ee77c1eb75c0e28b11ad94f6315e004aeaed9500e4"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-02T03:05:07.380770Z","signature_b64":"rFHxpyvvZBmkkIimTTweZ94dUfJwcReIqMBVZ9O1uVhRP/kGqHEhiP1OGfHDU046WrCi2vQSmEdHSsxTa22gBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4fc9d5b3b2ce0534ad8de8c036b8bbecd5afc5a8583ab438a96da867240198c1","last_reissued_at":"2026-06-02T03:05:07.380429Z","signature_status":"signed_v1","first_computed_at":"2026-06-02T03:05:07.380429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Ghost Tool Calls: Issue-Time Privacy for Speculative Agent Tools","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Akhil Arora, Bardia Mohammadi, Lars Klein, Laurent Bindschaedler","submitted_at":"2026-06-01T16:53:19Z","abstract_excerpt":"Tool-augmented language agents speculatively issue likely future tool calls to hide latency, but those calls leak inferred user intent to external services before the agent commits to the branch. Every external observer that received the call retains the disclosure after the agent abandons the branch. Timing is the issue, not authorization: no commit-time cleanup, read-only restriction, or access-control allow-list unsends what an observer already holds. We call these invocations ghost tool calls and propose Speculative Tool Privacy Contracts, a runtime abstraction that treats observation befo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.02483","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.02483/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.02483","created_at":"2026-06-02T03:05:07.380484+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.02483v1","created_at":"2026-06-02T03:05:07.380484+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.02483","created_at":"2026-06-02T03:05:07.380484+00:00"},{"alias_kind":"pith_short_12","alias_value":"J7E5LM5SZYCT","created_at":"2026-06-02T03:05:07.380484+00:00"},{"alias_kind":"pith_short_16","alias_value":"J7E5LM5SZYCTJLMN","created_at":"2026-06-02T03:05:07.380484+00:00"},{"alias_kind":"pith_short_8","alias_value":"J7E5LM5S","created_at":"2026-06-02T03:05:07.380484+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T","json":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T.json","graph_json":"https://pith.science/api/pith-number/J7E5LM5SZYCTJLMN5DADNOF35T/graph.json","events_json":"https://pith.science/api/pith-number/J7E5LM5SZYCTJLMN5DADNOF35T/events.json","paper":"https://pith.science/paper/J7E5LM5S"},"agent_actions":{"view_html":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T","download_json":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T.json","view_paper":"https://pith.science/paper/J7E5LM5S","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.02483&json=true","fetch_graph":"https://pith.science/api/pith-number/J7E5LM5SZYCTJLMN5DADNOF35T/graph.json","fetch_events":"https://pith.science/api/pith-number/J7E5LM5SZYCTJLMN5DADNOF35T/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T/action/timestamp_anchor","attest_storage":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T/action/storage_attestation","attest_author":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T/action/author_attestation","sign_citation":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T/action/citation_signature","submit_replication":"https://pith.science/pith/J7E5LM5SZYCTJLMN5DADNOF35T/action/replication_record"}},"created_at":"2026-06-02T03:05:07.380484+00:00","updated_at":"2026-06-02T03:05:07.380484+00:00"}