{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:MJ76XM6XHVMI4TTHCRG5AKHQRQ","short_pith_number":"pith:MJ76XM6X","canonical_record":{"source":{"id":"2607.06595","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T19:30:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7a9013ce5994774d3085ad9d97912c375403ff44b439e6c451cd442f346d5da4","abstract_canon_sha256":"7989abbcbf2b0f9b2fc26f3d45d86f559cb3da9958108e8a5402a5da7e1315b8"},"schema_version":"1.0"},"canonical_sha256":"627febb3d73d588e4e67144dd028f08c0a70afcac3ffc34b4c263fe8d101ee25","source":{"kind":"arxiv","id":"2607.06595","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.06595","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"arxiv_version","alias_value":"2607.06595v1","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.06595","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"pith_short_12","alias_value":"MJ76XM6XHVMI","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"pith_short_16","alias_value":"MJ76XM6XHVMI4TTH","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"pith_short_8","alias_value":"MJ76XM6X","created_at":"2026-07-09T00:19:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:MJ76XM6XHVMI4TTHCRG5AKHQRQ","target":"record","payload":{"canonical_record":{"source":{"id":"2607.06595","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T19:30:53Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7a9013ce5994774d3085ad9d97912c375403ff44b439e6c451cd442f346d5da4","abstract_canon_sha256":"7989abbcbf2b0f9b2fc26f3d45d86f559cb3da9958108e8a5402a5da7e1315b8"},"schema_version":"1.0"},"canonical_sha256":"627febb3d73d588e4e67144dd028f08c0a70afcac3ffc34b4c263fe8d101ee25","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-09T00:19:19.711395Z","signature_b64":"PkdPhGFPH4j+xvBARJZkQWivrOrDXEuQFasFDa242m4YRMx9KORGG1H1OF3AiCUOw58m75JGtmILZq8Z4x5QBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"627febb3d73d588e4e67144dd028f08c0a70afcac3ffc34b4c263fe8d101ee25","last_reissued_at":"2026-07-09T00:19:19.710888Z","signature_status":"signed_v1","first_computed_at":"2026-07-09T00:19:19.710888Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.06595","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T00:19:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2LP7y1BXBda6oYYBeZe6J7jsQ5V+lnsVLK4XaPtzPavt0mSIe/OWCAMu7QlGbrYeBv6MjMGLquHEk5DlQ4+uAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:00:26.300945Z"},"content_sha256":"570a15dd2c63f90c81f581ae98d99a60a40680ff3bbea14aadc4cdd34bd8ecdf","schema_version":"1.0","event_id":"sha256:570a15dd2c63f90c81f581ae98d99a60a40680ff3bbea14aadc4cdd34bd8ecdf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:MJ76XM6XHVMI4TTHCRG5AKHQRQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"George Torres, Satyajayant Misra, Sharad Shrestha","submitted_at":"2026-07-06T19:30:53Z","abstract_excerpt":"Personal AI agents powered by large language models can reason and act using available tools to access emails, manage calendars, and push code to remote repositories, all with minimal oversight. When augmented with long-term memory, an agent can recall specific details relevant to the current task, reducing the need for large context windows. Currently, long-term memory agents tend to fall into two distinct domains: conversational and action-planning agents. Personal assistant agents sit at the convergence of these two domains and handle sensitive information while interacting with untrusted i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.06595","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.06595/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-09T00:19:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NXk6fko2akZKhZ3a/QC027bixxYT6qGAxkwwdU5vQVO3jWhcgdPOiN7zrOxUFuAs9NTa/SHwm9nXAIfwPv+ZCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:00:26.301943Z"},"content_sha256":"323f98a0d4b21e3317685e29754ba308f82f03c749082805906b7a099fdb8000","schema_version":"1.0","event_id":"sha256:323f98a0d4b21e3317685e29754ba308f82f03c749082805906b7a099fdb8000"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ/bundle.json","state_url":"https://pith.science/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T20:00:26Z","links":{"resolver":"https://pith.science/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ","bundle":"https://pith.science/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ/bundle.json","state":"https://pith.science/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MJ76XM6XHVMI4TTHCRG5AKHQRQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:MJ76XM6XHVMI4TTHCRG5AKHQRQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7989abbcbf2b0f9b2fc26f3d45d86f559cb3da9958108e8a5402a5da7e1315b8","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T19:30:53Z","title_canon_sha256":"7a9013ce5994774d3085ad9d97912c375403ff44b439e6c451cd442f346d5da4"},"schema_version":"1.0","source":{"id":"2607.06595","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.06595","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"arxiv_version","alias_value":"2607.06595v1","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.06595","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"pith_short_12","alias_value":"MJ76XM6XHVMI","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"pith_short_16","alias_value":"MJ76XM6XHVMI4TTH","created_at":"2026-07-09T00:19:19Z"},{"alias_kind":"pith_short_8","alias_value":"MJ76XM6X","created_at":"2026-07-09T00:19:19Z"}],"graph_snapshots":[{"event_id":"sha256:323f98a0d4b21e3317685e29754ba308f82f03c749082805906b7a099fdb8000","target":"graph","created_at":"2026-07-09T00:19:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.06595/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Personal AI agents powered by large language models can reason and act using available tools to access emails, manage calendars, and push code to remote repositories, all with minimal oversight. When augmented with long-term memory, an agent can recall specific details relevant to the current task, reducing the need for large context windows. Currently, long-term memory agents tend to fall into two distinct domains: conversational and action-planning agents. Personal assistant agents sit at the convergence of these two domains and handle sensitive information while interacting with untrusted i","authors_text":"George Torres, Satyajayant Misra, Sharad Shrestha","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T19:30:53Z","title":"When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.06595","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:570a15dd2c63f90c81f581ae98d99a60a40680ff3bbea14aadc4cdd34bd8ecdf","target":"record","created_at":"2026-07-09T00:19:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7989abbcbf2b0f9b2fc26f3d45d86f559cb3da9958108e8a5402a5da7e1315b8","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-06T19:30:53Z","title_canon_sha256":"7a9013ce5994774d3085ad9d97912c375403ff44b439e6c451cd442f346d5da4"},"schema_version":"1.0","source":{"id":"2607.06595","kind":"arxiv","version":1}},"canonical_sha256":"627febb3d73d588e4e67144dd028f08c0a70afcac3ffc34b4c263fe8d101ee25","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"627febb3d73d588e4e67144dd028f08c0a70afcac3ffc34b4c263fe8d101ee25","first_computed_at":"2026-07-09T00:19:19.710888Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-09T00:19:19.710888Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PkdPhGFPH4j+xvBARJZkQWivrOrDXEuQFasFDa242m4YRMx9KORGG1H1OF3AiCUOw58m75JGtmILZq8Z4x5QBg==","signature_status":"signed_v1","signed_at":"2026-07-09T00:19:19.711395Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.06595","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:570a15dd2c63f90c81f581ae98d99a60a40680ff3bbea14aadc4cdd34bd8ecdf","sha256:323f98a0d4b21e3317685e29754ba308f82f03c749082805906b7a099fdb8000"],"state_sha256":"b66f5b83ac9a54b9995329171d601b2b30cf6e3ef128a0764ad0f60b8a03c219"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s3jnkMX/z0GhZcH8nbdKQATCzSlCi0kF3IXJZTS/+9roFwDTB9bsRxokM3Z/RpPRS55AQ8zm7810s9qVVOkuAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T20:00:26.308856Z","bundle_sha256":"4f9f1902a72049f8784ed9c1007052f548c0fc0c3ae17e03eb3a4dd0c9f492c3"}}