{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JAX3EZWVACLSAXR7YQL2M5LQHA","short_pith_number":"pith:JAX3EZWV","canonical_record":{"source":{"id":"2504.09593","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-13T14:18:35Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d92de1a66a5bf552f7b080cc338beb93b31a38c1d47327105fa61c68a256aceb","abstract_canon_sha256":"8f324983736d06f94ad7ae99362cfa034572bb53bd8a536787e02e573a082c2b"},"schema_version":"1.0"},"canonical_sha256":"482fb266d50097205e3fc417a67570380c0c05d3d77cd0adaf0abf5c129f1fb7","source":{"kind":"arxiv","id":"2504.09593","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.09593","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"arxiv_version","alias_value":"2504.09593v2","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09593","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"pith_short_12","alias_value":"JAX3EZWVACLS","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"pith_short_16","alias_value":"JAX3EZWVACLSAXR7","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"pith_short_8","alias_value":"JAX3EZWV","created_at":"2026-07-05T10:50:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JAX3EZWVACLSAXR7YQL2M5LQHA","target":"record","payload":{"canonical_record":{"source":{"id":"2504.09593","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-13T14:18:35Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d92de1a66a5bf552f7b080cc338beb93b31a38c1d47327105fa61c68a256aceb","abstract_canon_sha256":"8f324983736d06f94ad7ae99362cfa034572bb53bd8a536787e02e573a082c2b"},"schema_version":"1.0"},"canonical_sha256":"482fb266d50097205e3fc417a67570380c0c05d3d77cd0adaf0abf5c129f1fb7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:50:12.932558Z","signature_b64":"4b0VIGA7ZZUcwhmFpCzRfashQwNxzI5oqr7oRfwuyLld+d8NHCO+3mvKk7xmqGY9jScy7UnH1kKBIgGtjsZ7CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"482fb266d50097205e3fc417a67570380c0c05d3d77cd0adaf0abf5c129f1fb7","last_reissued_at":"2026-07-05T10:50:12.932075Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:50:12.932075Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.09593","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:50:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4r31eCDHA5FyTiUrnqnqgSSUdivqFk1I3CuE+rRxAyVgjxKJHpxLzMvAluPBrfvMOpkKgIoOiyvk2Nzz2gpICg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:25:55.931298Z"},"content_sha256":"0bcc0acff3e7aeaa66a0435217e21d151397f1435dfd8ca8b753254d7c9eefb5","schema_version":"1.0","event_id":"sha256:0bcc0acff3e7aeaa66a0435217e21d151397f1435dfd8ca8b753254d7c9eefb5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JAX3EZWVACLSAXR7YQL2M5LQHA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ControlNET: A Firewall for RAG-based LLM System","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Cong Wang, Haoran Shi, Hongwei Yao, Yidou Chen, Yixin Jiang, Zhan Qin","submitted_at":"2025-04-13T14:18:35Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) has significantly enhanced the factual accuracy and domain adaptability of Large Language Models (LLMs). This advancement has enabled their widespread deployment across sensitive domains such as healthcare, finance, and enterprise applications. RAG mitigates hallucinations by integrating external knowledge, yet introduces privacy risk and security risk, notably data breaching risk and data poisoning risk. While recent studies have explored prompt injection and poisoning attacks, there remains a significant gap in comprehensive research on controlling inboun"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09593","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.09593/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:50:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"q6qCi08RxMp0fKfaJ8jj9FtbfJRa8hYlEIgQcecnysMGnJYvuZC0kk1J4lvtk091IFgmoOIWiV4kTk9MpXI2Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T18:25:55.932700Z"},"content_sha256":"5deff1bff9782ce5259af75bf45d342f326834f0387ed8e65512c0d2a452dcf3","schema_version":"1.0","event_id":"sha256:5deff1bff9782ce5259af75bf45d342f326834f0387ed8e65512c0d2a452dcf3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JAX3EZWVACLSAXR7YQL2M5LQHA/bundle.json","state_url":"https://pith.science/pith/JAX3EZWVACLSAXR7YQL2M5LQHA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JAX3EZWVACLSAXR7YQL2M5LQHA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T18:25:55Z","links":{"resolver":"https://pith.science/pith/JAX3EZWVACLSAXR7YQL2M5LQHA","bundle":"https://pith.science/pith/JAX3EZWVACLSAXR7YQL2M5LQHA/bundle.json","state":"https://pith.science/pith/JAX3EZWVACLSAXR7YQL2M5LQHA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JAX3EZWVACLSAXR7YQL2M5LQHA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JAX3EZWVACLSAXR7YQL2M5LQHA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f324983736d06f94ad7ae99362cfa034572bb53bd8a536787e02e573a082c2b","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-13T14:18:35Z","title_canon_sha256":"d92de1a66a5bf552f7b080cc338beb93b31a38c1d47327105fa61c68a256aceb"},"schema_version":"1.0","source":{"id":"2504.09593","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.09593","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"arxiv_version","alias_value":"2504.09593v2","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.09593","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"pith_short_12","alias_value":"JAX3EZWVACLS","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"pith_short_16","alias_value":"JAX3EZWVACLSAXR7","created_at":"2026-07-05T10:50:12Z"},{"alias_kind":"pith_short_8","alias_value":"JAX3EZWV","created_at":"2026-07-05T10:50:12Z"}],"graph_snapshots":[{"event_id":"sha256:5deff1bff9782ce5259af75bf45d342f326834f0387ed8e65512c0d2a452dcf3","target":"graph","created_at":"2026-07-05T10:50:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.09593/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) has significantly enhanced the factual accuracy and domain adaptability of Large Language Models (LLMs). This advancement has enabled their widespread deployment across sensitive domains such as healthcare, finance, and enterprise applications. RAG mitigates hallucinations by integrating external knowledge, yet introduces privacy risk and security risk, notably data breaching risk and data poisoning risk. While recent studies have explored prompt injection and poisoning attacks, there remains a significant gap in comprehensive research on controlling inboun","authors_text":"Cong Wang, Haoran Shi, Hongwei Yao, Yidou Chen, Yixin Jiang, Zhan Qin","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-13T14:18:35Z","title":"ControlNET: A Firewall for RAG-based LLM System"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.09593","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0bcc0acff3e7aeaa66a0435217e21d151397f1435dfd8ca8b753254d7c9eefb5","target":"record","created_at":"2026-07-05T10:50:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f324983736d06f94ad7ae99362cfa034572bb53bd8a536787e02e573a082c2b","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-13T14:18:35Z","title_canon_sha256":"d92de1a66a5bf552f7b080cc338beb93b31a38c1d47327105fa61c68a256aceb"},"schema_version":"1.0","source":{"id":"2504.09593","kind":"arxiv","version":2}},"canonical_sha256":"482fb266d50097205e3fc417a67570380c0c05d3d77cd0adaf0abf5c129f1fb7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"482fb266d50097205e3fc417a67570380c0c05d3d77cd0adaf0abf5c129f1fb7","first_computed_at":"2026-07-05T10:50:12.932075Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:50:12.932075Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4b0VIGA7ZZUcwhmFpCzRfashQwNxzI5oqr7oRfwuyLld+d8NHCO+3mvKk7xmqGY9jScy7UnH1kKBIgGtjsZ7CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:50:12.932558Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.09593","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0bcc0acff3e7aeaa66a0435217e21d151397f1435dfd8ca8b753254d7c9eefb5","sha256:5deff1bff9782ce5259af75bf45d342f326834f0387ed8e65512c0d2a452dcf3"],"state_sha256":"91e3622ed0238692bfea7d6b0cdc55e75c971e83d23690b8c188e03617b5195e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XQOX2LkQQqS+OIUue9KCYlGSUB9YrN0UEskME7PqfSBQpdgyS2oKYj4AlWWV6EMM0wQflVWs48gJBqnKYq3kCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T18:25:55.940394Z","bundle_sha256":"a8cda6e297104b0eaca3ea74fe8a28a16de91c25c8ce31d06498c7feb8363b51"}}