{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LCD4RKJNHKJKEP6UXBPCGTIXWT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"12fe57aa9d3feaaf93086b74ef2398360336d888b8d68c6dc6eb802204a49694","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2025-04-15T15:21:09Z","title_canon_sha256":"d479c9af6f8180f170506f40024acfde95a063cbdd7e96fd941b7c1851bca5e6"},"schema_version":"1.0","source":{"id":"2504.11281","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.11281","created_at":"2026-07-05T10:49:31Z"},{"alias_kind":"arxiv_version","alias_value":"2504.11281v1","created_at":"2026-07-05T10:49:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.11281","created_at":"2026-07-05T10:49:31Z"},{"alias_kind":"pith_short_12","alias_value":"LCD4RKJNHKJK","created_at":"2026-07-05T10:49:31Z"},{"alias_kind":"pith_short_16","alias_value":"LCD4RKJNHKJKEP6U","created_at":"2026-07-05T10:49:31Z"},{"alias_kind":"pith_short_8","alias_value":"LCD4RKJN","created_at":"2026-07-05T10:49:31Z"}],"graph_snapshots":[{"event_id":"sha256:ce59d588af7c2779fb225f7fb5d181f3111505d7cef8c7a5dff69b79c244abd0","target":"graph","created_at":"2026-07-05T10:49:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.11281/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A Large Language Model (LLM) powered GUI agent is a specialized autonomous system that performs tasks on the user's behalf according to high-level instructions. It does so by perceiving and interpreting the graphical user interfaces (GUIs) of relevant apps, often visually, inferring necessary sequences of actions, and then interacting with GUIs by executing the actions such as clicking, typing, and tapping. To complete real-world tasks, such as filling forms or booking services, GUI agents often need to process and act on sensitive user data. However, this autonomy introduces new privacy and s","authors_text":"Bingcan Guo, Chaoran Chen, Ibrahim Khalilov, Shang Ma, Simret A Gebreegziabher, Tianshi Li, Toby Jia-Jun Li, Yanfang Ye, Yaxing Yao, Zhiping Zhang, Ziang Xiao","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2025-04-15T15:21:09Z","title":"The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.11281","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b7fc39f64f4c676aa8f3df02791e9d53b18b29e06752ddd21118dcd6e1813867","target":"record","created_at":"2026-07-05T10:49:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"12fe57aa9d3feaaf93086b74ef2398360336d888b8d68c6dc6eb802204a49694","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.HC","submitted_at":"2025-04-15T15:21:09Z","title_canon_sha256":"d479c9af6f8180f170506f40024acfde95a063cbdd7e96fd941b7c1851bca5e6"},"schema_version":"1.0","source":{"id":"2504.11281","kind":"arxiv","version":1}},"canonical_sha256":"5887c8a92d3a92a23fd4b85e234d17b4f72f99b8beac7d490d9d748a357da915","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5887c8a92d3a92a23fd4b85e234d17b4f72f99b8beac7d490d9d748a357da915","first_computed_at":"2026-07-05T10:49:31.686697Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:49:31.686697Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w3VF81/bJf205S+dBetw8uDX4FyWzyRjwJyuk0jAm2AMWtIZ7R/0K72BYj4GTYjxG/HwJpxcQbYwNxTPDnS5Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:49:31.687347Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.11281","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b7fc39f64f4c676aa8f3df02791e9d53b18b29e06752ddd21118dcd6e1813867","sha256:ce59d588af7c2779fb225f7fb5d181f3111505d7cef8c7a5dff69b79c244abd0"],"state_sha256":"6f04b0c82e857b48a68abac0fcd9d8ee7436d617a324cfce1fad864e42a6e7dc"}