{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KEFS7RD7OP4D63DWK2ZER6CVCP","short_pith_number":"pith:KEFS7RD7","canonical_record":{"source":{"id":"2502.19145","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-26T14:00:35Z","cross_cats_sorted":["cs.MA"],"title_canon_sha256":"6bf04476bfbde0611707d385bae9d02e37850c1245c03b7c066885ce2d0b7b07","abstract_canon_sha256":"ddfc96390806335b06abef9e7369a883b3daa032148faafc9653ce58ec35025f"},"schema_version":"1.0"},"canonical_sha256":"510b2fc47f73f83f6c7656b248f85513c0ccb2c6d247cdb47f7878c24a4db4bf","source":{"kind":"arxiv","id":"2502.19145","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19145","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19145v2","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19145","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"pith_short_12","alias_value":"KEFS7RD7OP4D","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"pith_short_16","alias_value":"KEFS7RD7OP4D63DW","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"pith_short_8","alias_value":"KEFS7RD7","created_at":"2026-07-05T11:16:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KEFS7RD7OP4D63DWK2ZER6CVCP","target":"record","payload":{"canonical_record":{"source":{"id":"2502.19145","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-26T14:00:35Z","cross_cats_sorted":["cs.MA"],"title_canon_sha256":"6bf04476bfbde0611707d385bae9d02e37850c1245c03b7c066885ce2d0b7b07","abstract_canon_sha256":"ddfc96390806335b06abef9e7369a883b3daa032148faafc9653ce58ec35025f"},"schema_version":"1.0"},"canonical_sha256":"510b2fc47f73f83f6c7656b248f85513c0ccb2c6d247cdb47f7878c24a4db4bf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:16:06.552953Z","signature_b64":"HyFDDvoQrqHwaYLfaZ0JzVBiZjSj6DId+2xQZHqm7XVFrQmCOVEEv0MeiHK8UgWK6TyIKxdnmiHUt1HRjlynDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"510b2fc47f73f83f6c7656b248f85513c0ccb2c6d247cdb47f7878c24a4db4bf","last_reissued_at":"2026-07-05T11:16:06.552449Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:16:06.552449Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.19145","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"phTGXqH5SYmxKkSpr10wAEom1CF/gURRMhyt5UCeztnct2f1vRrT7wHTwaAMKDu/uxL1XhJCGnWKUViNGaHJDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T20:09:23.581339Z"},"content_sha256":"c793ed89f724826b0ddc1ff88e74987a00881208297373d0023e174dc0b27232","schema_version":"1.0","event_id":"sha256:c793ed89f724826b0ddc1ff88e74987a00881208297373d0023e174dc0b27232"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KEFS7RD7OP4D63DWK2ZER6CVCP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.MA"],"primary_cat":"cs.AI","authors_text":"Christian Schroeder de Witt, Esben Kran, Filip Sondej, Jason Hoelscher-Obermaier, Matthieu David, Mikolaj Kniejski, Pierre Peigne-Lefebvre","submitted_at":"2025-02-26T14:00:35Z","abstract_excerpt":"As AI agents are increasingly adopted to collaborate on complex objectives, ensuring the security of autonomous multi-agent systems becomes crucial. We develop simulations of agents collaborating on shared objectives to study these security risks and security trade-offs. We focus on scenarios where an attacker compromises one agent, using it to steer the entire system toward misaligned outcomes by corrupting other agents. In this context, we observe infectious malicious prompts - the multi-hop spreading of malicious instructions. To mitigate this risk, we evaluated several strategies: two \"vac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19145","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.19145/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8dKf0zwvvcWKRfAljtJWZGci8ddGzRtjI+Sju/mg6jXJ4N7QlY7pEsiByeC3aDPHHWkj7ARTYyY+4jrfG5/JAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T20:09:23.581869Z"},"content_sha256":"36b51b5f2813051aa74784cc176000de671c61c7f3896188653e0925b133121e","schema_version":"1.0","event_id":"sha256:36b51b5f2813051aa74784cc176000de671c61c7f3896188653e0925b133121e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KEFS7RD7OP4D63DWK2ZER6CVCP/bundle.json","state_url":"https://pith.science/pith/KEFS7RD7OP4D63DWK2ZER6CVCP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KEFS7RD7OP4D63DWK2ZER6CVCP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T20:09:23Z","links":{"resolver":"https://pith.science/pith/KEFS7RD7OP4D63DWK2ZER6CVCP","bundle":"https://pith.science/pith/KEFS7RD7OP4D63DWK2ZER6CVCP/bundle.json","state":"https://pith.science/pith/KEFS7RD7OP4D63DWK2ZER6CVCP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KEFS7RD7OP4D63DWK2ZER6CVCP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KEFS7RD7OP4D63DWK2ZER6CVCP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ddfc96390806335b06abef9e7369a883b3daa032148faafc9653ce58ec35025f","cross_cats_sorted":["cs.MA"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-26T14:00:35Z","title_canon_sha256":"6bf04476bfbde0611707d385bae9d02e37850c1245c03b7c066885ce2d0b7b07"},"schema_version":"1.0","source":{"id":"2502.19145","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19145","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19145v2","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19145","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"pith_short_12","alias_value":"KEFS7RD7OP4D","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"pith_short_16","alias_value":"KEFS7RD7OP4D63DW","created_at":"2026-07-05T11:16:06Z"},{"alias_kind":"pith_short_8","alias_value":"KEFS7RD7","created_at":"2026-07-05T11:16:06Z"}],"graph_snapshots":[{"event_id":"sha256:36b51b5f2813051aa74784cc176000de671c61c7f3896188653e0925b133121e","target":"graph","created_at":"2026-07-05T11:16:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.19145/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As AI agents are increasingly adopted to collaborate on complex objectives, ensuring the security of autonomous multi-agent systems becomes crucial. We develop simulations of agents collaborating on shared objectives to study these security risks and security trade-offs. We focus on scenarios where an attacker compromises one agent, using it to steer the entire system toward misaligned outcomes by corrupting other agents. In this context, we observe infectious malicious prompts - the multi-hop spreading of malicious instructions. To mitigate this risk, we evaluated several strategies: two \"vac","authors_text":"Christian Schroeder de Witt, Esben Kran, Filip Sondej, Jason Hoelscher-Obermaier, Matthieu David, Mikolaj Kniejski, Pierre Peigne-Lefebvre","cross_cats":["cs.MA"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-26T14:00:35Z","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19145","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c793ed89f724826b0ddc1ff88e74987a00881208297373d0023e174dc0b27232","target":"record","created_at":"2026-07-05T11:16:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ddfc96390806335b06abef9e7369a883b3daa032148faafc9653ce58ec35025f","cross_cats_sorted":["cs.MA"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-26T14:00:35Z","title_canon_sha256":"6bf04476bfbde0611707d385bae9d02e37850c1245c03b7c066885ce2d0b7b07"},"schema_version":"1.0","source":{"id":"2502.19145","kind":"arxiv","version":2}},"canonical_sha256":"510b2fc47f73f83f6c7656b248f85513c0ccb2c6d247cdb47f7878c24a4db4bf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"510b2fc47f73f83f6c7656b248f85513c0ccb2c6d247cdb47f7878c24a4db4bf","first_computed_at":"2026-07-05T11:16:06.552449Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:16:06.552449Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HyFDDvoQrqHwaYLfaZ0JzVBiZjSj6DId+2xQZHqm7XVFrQmCOVEEv0MeiHK8UgWK6TyIKxdnmiHUt1HRjlynDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:16:06.552953Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.19145","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c793ed89f724826b0ddc1ff88e74987a00881208297373d0023e174dc0b27232","sha256:36b51b5f2813051aa74784cc176000de671c61c7f3896188653e0925b133121e"],"state_sha256":"a46d8903964cb1cb2488f9c881d4988e4adf2a550a8b42470b1c82c94c4c9b6c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rQzlNeQLUcHykXF7JIFADDu7lFwncD4OvJv4n1eQR2J+PeHCQLUad16eCSG6oSu/I3LMbdbu+mGzrRWyAoVmAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T20:09:23.587165Z","bundle_sha256":"8582a6a904d9c477ba49e8c2eb82e5f187de5078c9bbbf82919fc57d1bcdf4cc"}}