{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:L2RNU4XDMPDHAQIEJKMDSTRNX5","short_pith_number":"pith:L2RNU4XD","canonical_record":{"source":{"id":"2607.08400","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T12:25:22Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"fef54de05204f3230baafc454ed775b30677eb5f6791e3c67b2cfbcff650569c","abstract_canon_sha256":"8858481ba2ca1020b3955dc7e636c0852ee9783b41717167cf8a4712ae1b565f"},"schema_version":"1.0"},"canonical_sha256":"5ea2da72e363c67041044a98394e2dbf6a2975f334262f76c5840c7157f6c158","source":{"kind":"arxiv","id":"2607.08400","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.08400","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"arxiv_version","alias_value":"2607.08400v1","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.08400","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"pith_short_12","alias_value":"L2RNU4XDMPDH","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"pith_short_16","alias_value":"L2RNU4XDMPDHAQIE","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"pith_short_8","alias_value":"L2RNU4XD","created_at":"2026-07-10T01:19:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:L2RNU4XDMPDHAQIEJKMDSTRNX5","target":"record","payload":{"canonical_record":{"source":{"id":"2607.08400","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T12:25:22Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"fef54de05204f3230baafc454ed775b30677eb5f6791e3c67b2cfbcff650569c","abstract_canon_sha256":"8858481ba2ca1020b3955dc7e636c0852ee9783b41717167cf8a4712ae1b565f"},"schema_version":"1.0"},"canonical_sha256":"5ea2da72e363c67041044a98394e2dbf6a2975f334262f76c5840c7157f6c158","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-10T01:19:49.204485Z","signature_b64":"z1V8Kn0P4eANtEUao08w881E5sJBZN7PGlJzFM4/2VDDEkUUHH3amE5Pn89y0aMvdryLWtn7CayxAxS0oXjVCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5ea2da72e363c67041044a98394e2dbf6a2975f334262f76c5840c7157f6c158","last_reissued_at":"2026-07-10T01:19:49.203997Z","signature_status":"signed_v1","first_computed_at":"2026-07-10T01:19:49.203997Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.08400","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T01:19:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"A4g8s3CwF+tNbNaMss9+UGf00K8HG9Mwrt4DeB2cKpMpaJN1JHxUZANxxZ8rGWK9LrJuw5rKa09vp002b0/5CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T10:05:55.716339Z"},"content_sha256":"7260a8f9e0ebe2d912ddeae2d4c48f90189032aa3f3f8510ff3af8f31a75695b","schema_version":"1.0","event_id":"sha256:7260a8f9e0ebe2d912ddeae2d4c48f90189032aa3f3f8510ff3af8f31a75695b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:L2RNU4XDMPDHAQIEJKMDSTRNX5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TRACE: A Two-Channel Robust Attribution Watermark via Complementary Embeddings for LLM-Agent Trajectories","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Jiaojiao Jiang, Liming Zhu, Xiaoyan Feng, Xiaoyu Li, Yang Song, Yulei Sui, Zhenchang Xing, Zheng Gao","submitted_at":"2026-07-09T12:25:22Z","abstract_excerpt":"LLM agents reach users through resellers, who may rebrand a developer's agent or substitute a cheaper model. When provenance is disputed, attribution rests on the trajectory log (the record of tool calls, observations, and executed actions, not the model's reasoning), which the reseller stores and processes to meter usage. A watermark must therefore survive an adversary with full read/write access to the very evidence it is detected from; existing agent watermarks do not, as their attribution is read straight off that log. We present TRACE, to our knowledge the first agent watermark that is di"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.08400","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.08400/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-10T01:19:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/c1Ci43Dk/Bb2+LrwhW6K7qSgyVB8IdwzgJSW1EFx6lZ6b1DgDSgHRYGR347bjx5b96+G6P+pBP8733Q3xL/Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T10:05:55.716705Z"},"content_sha256":"a9a8442252665c5f4a80cab37c38f5dce5f0781e396e02174c30a61f0d1b6748","schema_version":"1.0","event_id":"sha256:a9a8442252665c5f4a80cab37c38f5dce5f0781e396e02174c30a61f0d1b6748"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5/bundle.json","state_url":"https://pith.science/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T10:05:55Z","links":{"resolver":"https://pith.science/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5","bundle":"https://pith.science/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5/bundle.json","state":"https://pith.science/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L2RNU4XDMPDHAQIEJKMDSTRNX5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:L2RNU4XDMPDHAQIEJKMDSTRNX5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8858481ba2ca1020b3955dc7e636c0852ee9783b41717167cf8a4712ae1b565f","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T12:25:22Z","title_canon_sha256":"fef54de05204f3230baafc454ed775b30677eb5f6791e3c67b2cfbcff650569c"},"schema_version":"1.0","source":{"id":"2607.08400","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.08400","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"arxiv_version","alias_value":"2607.08400v1","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.08400","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"pith_short_12","alias_value":"L2RNU4XDMPDH","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"pith_short_16","alias_value":"L2RNU4XDMPDHAQIE","created_at":"2026-07-10T01:19:49Z"},{"alias_kind":"pith_short_8","alias_value":"L2RNU4XD","created_at":"2026-07-10T01:19:49Z"}],"graph_snapshots":[{"event_id":"sha256:a9a8442252665c5f4a80cab37c38f5dce5f0781e396e02174c30a61f0d1b6748","target":"graph","created_at":"2026-07-10T01:19:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.08400/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM agents reach users through resellers, who may rebrand a developer's agent or substitute a cheaper model. When provenance is disputed, attribution rests on the trajectory log (the record of tool calls, observations, and executed actions, not the model's reasoning), which the reseller stores and processes to meter usage. A watermark must therefore survive an adversary with full read/write access to the very evidence it is detected from; existing agent watermarks do not, as their attribution is read straight off that log. We present TRACE, to our knowledge the first agent watermark that is di","authors_text":"Jiaojiao Jiang, Liming Zhu, Xiaoyan Feng, Xiaoyu Li, Yang Song, Yulei Sui, Zhenchang Xing, Zheng Gao","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T12:25:22Z","title":"TRACE: A Two-Channel Robust Attribution Watermark via Complementary Embeddings for LLM-Agent Trajectories"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.08400","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7260a8f9e0ebe2d912ddeae2d4c48f90189032aa3f3f8510ff3af8f31a75695b","target":"record","created_at":"2026-07-10T01:19:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8858481ba2ca1020b3955dc7e636c0852ee9783b41717167cf8a4712ae1b565f","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-09T12:25:22Z","title_canon_sha256":"fef54de05204f3230baafc454ed775b30677eb5f6791e3c67b2cfbcff650569c"},"schema_version":"1.0","source":{"id":"2607.08400","kind":"arxiv","version":1}},"canonical_sha256":"5ea2da72e363c67041044a98394e2dbf6a2975f334262f76c5840c7157f6c158","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5ea2da72e363c67041044a98394e2dbf6a2975f334262f76c5840c7157f6c158","first_computed_at":"2026-07-10T01:19:49.203997Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-10T01:19:49.203997Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"z1V8Kn0P4eANtEUao08w881E5sJBZN7PGlJzFM4/2VDDEkUUHH3amE5Pn89y0aMvdryLWtn7CayxAxS0oXjVCQ==","signature_status":"signed_v1","signed_at":"2026-07-10T01:19:49.204485Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.08400","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7260a8f9e0ebe2d912ddeae2d4c48f90189032aa3f3f8510ff3af8f31a75695b","sha256:a9a8442252665c5f4a80cab37c38f5dce5f0781e396e02174c30a61f0d1b6748"],"state_sha256":"cb5e4a78cc6d7f280b9deb3d9e985813b2a20416ab8ae9e5e837dfd09bc27f6f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"neczM0JNmebpxdTDGFBndC4gpftR3QLOoTsv7bKPeVOpCrEeYob3nCDuk8Q9A3kr/CMmBJRyoVJMyQ3CH6FkAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T10:05:55.718818Z","bundle_sha256":"d768e27feff034340b42c2968614f46a29c7082ac59650fa9558a1c4b0063bed"}}