{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:JPUJOKXJW3RAYJJF6SMPCWHD4U","short_pith_number":"pith:JPUJOKXJ","canonical_record":{"source":{"id":"2504.10374","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-14T16:22:11Z","cross_cats_sorted":[],"title_canon_sha256":"25ecfdb073e566a78f82dcec178f71ea33e06906b7254e59194b5eb0f977190a","abstract_canon_sha256":"15315a734fd427fb3bf7596d368399749ad3e7dfdcd1cc4b4231b5d7e62e34bf"},"schema_version":"1.0"},"canonical_sha256":"4be8972ae9b6e20c2525f498f158e3e50935d3feb155b96886a478479edd78b1","source":{"kind":"arxiv","id":"2504.10374","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.10374","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"2504.10374v1","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.10374","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"JPUJOKXJW3RA","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"pith_short_16","alias_value":"JPUJOKXJW3RAYJJF","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"pith_short_8","alias_value":"JPUJOKXJ","created_at":"2026-07-05T10:48:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:JPUJOKXJW3RAYJJF6SMPCWHD4U","target":"record","payload":{"canonical_record":{"source":{"id":"2504.10374","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-14T16:22:11Z","cross_cats_sorted":[],"title_canon_sha256":"25ecfdb073e566a78f82dcec178f71ea33e06906b7254e59194b5eb0f977190a","abstract_canon_sha256":"15315a734fd427fb3bf7596d368399749ad3e7dfdcd1cc4b4231b5d7e62e34bf"},"schema_version":"1.0"},"canonical_sha256":"4be8972ae9b6e20c2525f498f158e3e50935d3feb155b96886a478479edd78b1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:48:59.100301Z","signature_b64":"HYBEjyrzynlhQyG29BquhjXYPODD9jB/j2ANnefgoZbe5o/iVeNULSq15Qx8BuLBKk+V+/839rpodgoqeh0tCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4be8972ae9b6e20c2525f498f158e3e50935d3feb155b96886a478479edd78b1","last_reissued_at":"2026-07-05T10:48:59.099831Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:48:59.099831Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.10374","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:48:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4m+4UwkfRAxQM6eUIxMKq8ihZTfVzGBRPLFQbJA6JRn33cskW+l290TBkVxHfhU0TZXC679YlsHTANuXUH6rAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T08:08:25.778396Z"},"content_sha256":"23d312cb27c0f2ecde7bd225eaaeb80afa79420c83f66cf1bf5d142eb2a84726","schema_version":"1.0","event_id":"sha256:23d312cb27c0f2ecde7bd225eaaeb80afa79420c83f66cf1bf5d142eb2a84726"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:JPUJOKXJW3RAYJJF6SMPCWHD4U","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Ctrl-Z: Controlling AI Agents via Resampling","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adam Kaufman, Akbir Khan, Aryan Bhatt, Buck Shlegeris, Cody Rushing, David Matolcsi, Tyler Tracy, Vasil Georgiev","submitted_at":"2025-04-14T16:22:11Z","abstract_excerpt":"Control evaluations measure whether monitoring and security protocols for AI systems prevent intentionally subversive AI models from causing harm. Our work presents the first control evaluation performed in an agent environment. We construct BashBench, a dataset of 257 challenging multi-step system administration tasks, and evaluate whether various safety measures can prevent an adversarially constructed AI agent from covertly downloading and executing malicious code in this environment. This multi-step setting introduces new attack and defense dynamics, which we investigate in order to design"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.10374","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.10374/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:48:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L1vGELZSE76Lk1+pRYnc0Q7E/3r1dTZ7MWjb81Rzf6z9wiXFgG5QkaYCKuRsk7qW3cUebm+RGVB5B5ip9pCsCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T08:08:25.778852Z"},"content_sha256":"0f51d34521b8b97907ad9e9b28e196b533b2cad809df3860a092886d47e7be86","schema_version":"1.0","event_id":"sha256:0f51d34521b8b97907ad9e9b28e196b533b2cad809df3860a092886d47e7be86"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U/bundle.json","state_url":"https://pith.science/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T08:08:25Z","links":{"resolver":"https://pith.science/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U","bundle":"https://pith.science/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U/bundle.json","state":"https://pith.science/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JPUJOKXJW3RAYJJF6SMPCWHD4U/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JPUJOKXJW3RAYJJF6SMPCWHD4U","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"15315a734fd427fb3bf7596d368399749ad3e7dfdcd1cc4b4231b5d7e62e34bf","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-14T16:22:11Z","title_canon_sha256":"25ecfdb073e566a78f82dcec178f71ea33e06906b7254e59194b5eb0f977190a"},"schema_version":"1.0","source":{"id":"2504.10374","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.10374","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"2504.10374v1","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.10374","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"JPUJOKXJW3RA","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"pith_short_16","alias_value":"JPUJOKXJW3RAYJJF","created_at":"2026-07-05T10:48:59Z"},{"alias_kind":"pith_short_8","alias_value":"JPUJOKXJ","created_at":"2026-07-05T10:48:59Z"}],"graph_snapshots":[{"event_id":"sha256:0f51d34521b8b97907ad9e9b28e196b533b2cad809df3860a092886d47e7be86","target":"graph","created_at":"2026-07-05T10:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.10374/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Control evaluations measure whether monitoring and security protocols for AI systems prevent intentionally subversive AI models from causing harm. Our work presents the first control evaluation performed in an agent environment. We construct BashBench, a dataset of 257 challenging multi-step system administration tasks, and evaluate whether various safety measures can prevent an adversarially constructed AI agent from covertly downloading and executing malicious code in this environment. This multi-step setting introduces new attack and defense dynamics, which we investigate in order to design","authors_text":"Adam Kaufman, Akbir Khan, Aryan Bhatt, Buck Shlegeris, Cody Rushing, David Matolcsi, Tyler Tracy, Vasil Georgiev","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-14T16:22:11Z","title":"Ctrl-Z: Controlling AI Agents via Resampling"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.10374","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:23d312cb27c0f2ecde7bd225eaaeb80afa79420c83f66cf1bf5d142eb2a84726","target":"record","created_at":"2026-07-05T10:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"15315a734fd427fb3bf7596d368399749ad3e7dfdcd1cc4b4231b5d7e62e34bf","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-04-14T16:22:11Z","title_canon_sha256":"25ecfdb073e566a78f82dcec178f71ea33e06906b7254e59194b5eb0f977190a"},"schema_version":"1.0","source":{"id":"2504.10374","kind":"arxiv","version":1}},"canonical_sha256":"4be8972ae9b6e20c2525f498f158e3e50935d3feb155b96886a478479edd78b1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4be8972ae9b6e20c2525f498f158e3e50935d3feb155b96886a478479edd78b1","first_computed_at":"2026-07-05T10:48:59.099831Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:48:59.099831Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HYBEjyrzynlhQyG29BquhjXYPODD9jB/j2ANnefgoZbe5o/iVeNULSq15Qx8BuLBKk+V+/839rpodgoqeh0tCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:48:59.100301Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.10374","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:23d312cb27c0f2ecde7bd225eaaeb80afa79420c83f66cf1bf5d142eb2a84726","sha256:0f51d34521b8b97907ad9e9b28e196b533b2cad809df3860a092886d47e7be86"],"state_sha256":"496eb5f3668e865ca63431a7c37e25337c2d00be87aae03cf2b42a0dda60a1bb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ie1uE/PvoTv7tjQk6Du7zeRFkGYLcLNkPgq0C9Nt2G9+iDgqyr5BIZJIYspnVKGRCBOFGsYckiXAN/hcx3KYDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T08:08:25.784215Z","bundle_sha256":"daf8759902190a68bec82b90302675025329345bf98e9a9e773b50ef3e9b092c"}}