{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:LIXJWEBKPLJ4BXCUIY3XF2FAIN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ac65b1c0d215aa423213d15f5ff9f7c71221a369d2beaa40cef5dc2448cb9cc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T06:28:21Z","title_canon_sha256":"35867e69722e8d53ff2114ae6c2aeb385cfbbab4daf110c92ae3e30a1206ea19"},"schema_version":"1.0","source":{"id":"2608.01759","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.01759","created_at":"2026-08-04T02:06:49Z"},{"alias_kind":"arxiv_version","alias_value":"2608.01759v1","created_at":"2026-08-04T02:06:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.01759","created_at":"2026-08-04T02:06:49Z"},{"alias_kind":"pith_short_12","alias_value":"LIXJWEBKPLJ4","created_at":"2026-08-04T02:06:49Z"},{"alias_kind":"pith_short_16","alias_value":"LIXJWEBKPLJ4BXCU","created_at":"2026-08-04T02:06:49Z"},{"alias_kind":"pith_short_8","alias_value":"LIXJWEBK","created_at":"2026-08-04T02:06:49Z"}],"graph_snapshots":[{"event_id":"sha256:c1440fef14e58ef37911d9047d428063f98311ea56f0c7912906e7c288cb9c0c","target":"graph","created_at":"2026-08-04T02:06:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.01759/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Self-evolving large language model agents improve their capabilities by distilling interaction trajectories into persistent experiences. Yet this mechanism introduces a new safety risk: experiences that are benign in isolation may jointly weaken an agent's safety boundary when accumulated and reused across sessions. Existing memory attacks typically require direct memory access or induce explicitly malicious records, limiting their stealthiness and applicability. We propose EvoBreak, an experience-conditioned sequential attack that operates through individually benign attack-stage tasks and in","authors_text":"Bingyu Yan, Chaozhuo Li, Litian Zhang, Xiaoming Zhang, Yirui Qi, Ziyi Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T06:28:21Z","title":"Benign Alone, Harmful Together: Exploiting Experience Composition in Self-Evolving LLM Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.01759","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b6e6e409ac0a736e3666a09e28e15e3875eec4605b2c5cff9a908b0bb3390448","target":"record","created_at":"2026-08-04T02:06:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ac65b1c0d215aa423213d15f5ff9f7c71221a369d2beaa40cef5dc2448cb9cc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-03T06:28:21Z","title_canon_sha256":"35867e69722e8d53ff2114ae6c2aeb385cfbbab4daf110c92ae3e30a1206ea19"},"schema_version":"1.0","source":{"id":"2608.01759","kind":"arxiv","version":1}},"canonical_sha256":"5a2e9b102a7ad3c0dc54463772e8a043634eec6781e618c4dc4e7ed739b88c18","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5a2e9b102a7ad3c0dc54463772e8a043634eec6781e618c4dc4e7ed739b88c18","first_computed_at":"2026-08-04T02:06:49.167329Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-04T02:06:49.167329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+V4MkDHxOwBbTECcXwR9eVNfPHugS1CdfbHnHK4SKX1aRa5E/XecAtudM5+xwvZrN19obwAaI/Z573bv9EgsBA==","signature_status":"signed_v1","signed_at":"2026-08-04T02:06:49.169207Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.01759","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b6e6e409ac0a736e3666a09e28e15e3875eec4605b2c5cff9a908b0bb3390448","sha256:c1440fef14e58ef37911d9047d428063f98311ea56f0c7912906e7c288cb9c0c"],"state_sha256":"b0723d4b62448a72c44ee197eff9b061368bb57b87a20d9f81350395ad2d7ffe"}