{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NDYOG3T7UP4YLV3ERYPNFVPFIB","short_pith_number":"pith:NDYOG3T7","canonical_record":{"source":{"id":"2405.05175","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-08T16:12:45Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"cf7d187714f6f01ae871a39fa4fa2684c718d8ff6983752d76288cab0aa871bd","abstract_canon_sha256":"28ef41cecfc93ddfa82eff44593c11939ed0876dfc6b98bde2670eeaad2a9a2a"},"schema_version":"1.0"},"canonical_sha256":"68f0e36e7fa3f985d7648e1ed2d5e54063109752268936b0b245a1791e69b3b2","source":{"kind":"arxiv","id":"2405.05175","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.05175","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"arxiv_version","alias_value":"2405.05175v2","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.05175","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"pith_short_12","alias_value":"NDYOG3T7UP4Y","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"pith_short_16","alias_value":"NDYOG3T7UP4YLV3E","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"pith_short_8","alias_value":"NDYOG3T7","created_at":"2026-07-05T09:08:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NDYOG3T7UP4YLV3ERYPNFVPFIB","target":"record","payload":{"canonical_record":{"source":{"id":"2405.05175","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-08T16:12:45Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"cf7d187714f6f01ae871a39fa4fa2684c718d8ff6983752d76288cab0aa871bd","abstract_canon_sha256":"28ef41cecfc93ddfa82eff44593c11939ed0876dfc6b98bde2670eeaad2a9a2a"},"schema_version":"1.0"},"canonical_sha256":"68f0e36e7fa3f985d7648e1ed2d5e54063109752268936b0b245a1791e69b3b2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:08:47.990028Z","signature_b64":"SBL7inLRYqVKFzJUwonDa2gOupwDrORPrP7WerbZ7+0/S7gqAomvfH0EFrlPXYq3NXJoif6FqEirXUvC2hqVBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"68f0e36e7fa3f985d7648e1ed2d5e54063109752268936b0b245a1791e69b3b2","last_reissued_at":"2026-07-05T09:08:47.989450Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:08:47.989450Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.05175","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:08:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cij1SCw2bwK4GRcVA6FZyiYKf3SjAY0XAYMRtG+MNIEPz7vSxN6Kf2KewVQvipmm4y3v4iUq12ayI6sxPgGgAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T20:43:15.140521Z"},"content_sha256":"2ccca179fb79bac163c8c1dafad4e7ebde393bf4e9dcfd92f5f67b7be673fc58","schema_version":"1.0","event_id":"sha256:2ccca179fb79bac163c8c1dafad4e7ebde393bf4e9dcfd92f5f67b7be673fc58"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NDYOG3T7UP4YLV3ERYPNFVPFIB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Borja Balle, Daniel Ramage, Eugene Bagdasarian, Marco Gruteser, Peter Kairouz, Ren Yi, Sahra Ghalebikesabi, Sewoong Oh","submitted_at":"2024-05-08T16:12:45Z","abstract_excerpt":"The growing use of large language model (LLM)-based conversational agents to manage sensitive user data raises significant privacy concerns. While these agents excel at understanding and acting on context, this capability can be exploited by malicious actors. We introduce a novel threat model where adversarial third-party apps manipulate the context of interaction to trick LLM-based agents into revealing private information not relevant to the task at hand.\n  Grounded in the framework of contextual integrity, we introduce AirGapAgent, a privacy-conscious agent designed to prevent unintended da"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.05175","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.05175/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:08:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VYHPTryugX33sIad+DGU8iQ3U8rTRu9J8TCPaePMKXSuygUJ1V//oc53zJq0LzCC1mppBgASJMKgkRdkLwd8AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T20:43:15.141042Z"},"content_sha256":"da98ecd9574ef6ca6aa7ec55b2b7e928bed1d3eb3a47101b215053a7df9099b5","schema_version":"1.0","event_id":"sha256:da98ecd9574ef6ca6aa7ec55b2b7e928bed1d3eb3a47101b215053a7df9099b5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB/bundle.json","state_url":"https://pith.science/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T20:43:15Z","links":{"resolver":"https://pith.science/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB","bundle":"https://pith.science/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB/bundle.json","state":"https://pith.science/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NDYOG3T7UP4YLV3ERYPNFVPFIB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NDYOG3T7UP4YLV3ERYPNFVPFIB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"28ef41cecfc93ddfa82eff44593c11939ed0876dfc6b98bde2670eeaad2a9a2a","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-08T16:12:45Z","title_canon_sha256":"cf7d187714f6f01ae871a39fa4fa2684c718d8ff6983752d76288cab0aa871bd"},"schema_version":"1.0","source":{"id":"2405.05175","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.05175","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"arxiv_version","alias_value":"2405.05175v2","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.05175","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"pith_short_12","alias_value":"NDYOG3T7UP4Y","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"pith_short_16","alias_value":"NDYOG3T7UP4YLV3E","created_at":"2026-07-05T09:08:47Z"},{"alias_kind":"pith_short_8","alias_value":"NDYOG3T7","created_at":"2026-07-05T09:08:47Z"}],"graph_snapshots":[{"event_id":"sha256:da98ecd9574ef6ca6aa7ec55b2b7e928bed1d3eb3a47101b215053a7df9099b5","target":"graph","created_at":"2026-07-05T09:08:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.05175/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The growing use of large language model (LLM)-based conversational agents to manage sensitive user data raises significant privacy concerns. While these agents excel at understanding and acting on context, this capability can be exploited by malicious actors. We introduce a novel threat model where adversarial third-party apps manipulate the context of interaction to trick LLM-based agents into revealing private information not relevant to the task at hand.\n  Grounded in the framework of contextual integrity, we introduce AirGapAgent, a privacy-conscious agent designed to prevent unintended da","authors_text":"Borja Balle, Daniel Ramage, Eugene Bagdasarian, Marco Gruteser, Peter Kairouz, Ren Yi, Sahra Ghalebikesabi, Sewoong Oh","cross_cats":["cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-08T16:12:45Z","title":"AirGapAgent: Protecting Privacy-Conscious Conversational Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.05175","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2ccca179fb79bac163c8c1dafad4e7ebde393bf4e9dcfd92f5f67b7be673fc58","target":"record","created_at":"2026-07-05T09:08:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"28ef41cecfc93ddfa82eff44593c11939ed0876dfc6b98bde2670eeaad2a9a2a","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-08T16:12:45Z","title_canon_sha256":"cf7d187714f6f01ae871a39fa4fa2684c718d8ff6983752d76288cab0aa871bd"},"schema_version":"1.0","source":{"id":"2405.05175","kind":"arxiv","version":2}},"canonical_sha256":"68f0e36e7fa3f985d7648e1ed2d5e54063109752268936b0b245a1791e69b3b2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"68f0e36e7fa3f985d7648e1ed2d5e54063109752268936b0b245a1791e69b3b2","first_computed_at":"2026-07-05T09:08:47.989450Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:08:47.989450Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SBL7inLRYqVKFzJUwonDa2gOupwDrORPrP7WerbZ7+0/S7gqAomvfH0EFrlPXYq3NXJoif6FqEirXUvC2hqVBw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:08:47.990028Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.05175","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2ccca179fb79bac163c8c1dafad4e7ebde393bf4e9dcfd92f5f67b7be673fc58","sha256:da98ecd9574ef6ca6aa7ec55b2b7e928bed1d3eb3a47101b215053a7df9099b5"],"state_sha256":"9d4579d76d15ca7978577d5d129bd6f0f091707a80492737c29be1f2a570b9ee"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QYuTl0n3JzEFwlik7BwYJPa+8Ek4X9GcBdujSR4ER5nn9YcITm5JHIc4hvEclq6OKHVdhgDa32+gbkBFTyMHBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T20:43:15.144670Z","bundle_sha256":"bece9ac8275b3b43fc0de9e9f038c94c7d45dc5a35ba35ca448c0c30c6a75ec3"}}