{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:NFHHVA54S2MFYIOQN52AVMLTSO","short_pith_number":"pith:NFHHVA54","canonical_record":{"source":{"id":"2607.26228","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-07-28T20:06:31Z","cross_cats_sorted":[],"title_canon_sha256":"0dbd7d296b394372dd5913c33962b184106bff2f35a8bf3e864ad8c1d004b337","abstract_canon_sha256":"8c660850af84e57d0a829b65724145a97b744bf9a579475a4a49c5cc0e6f967a"},"schema_version":"1.0"},"canonical_sha256":"694e7a83bc96985c21d06f740ab17393a997d15ca9035098168ed52e3db7fdf2","source":{"kind":"arxiv","id":"2607.26228","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.26228","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"arxiv_version","alias_value":"2607.26228v1","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.26228","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"pith_short_12","alias_value":"NFHHVA54S2MF","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"pith_short_16","alias_value":"NFHHVA54S2MFYIOQ","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"pith_short_8","alias_value":"NFHHVA54","created_at":"2026-07-30T01:17:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:NFHHVA54S2MFYIOQN52AVMLTSO","target":"record","payload":{"canonical_record":{"source":{"id":"2607.26228","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-07-28T20:06:31Z","cross_cats_sorted":[],"title_canon_sha256":"0dbd7d296b394372dd5913c33962b184106bff2f35a8bf3e864ad8c1d004b337","abstract_canon_sha256":"8c660850af84e57d0a829b65724145a97b744bf9a579475a4a49c5cc0e6f967a"},"schema_version":"1.0"},"canonical_sha256":"694e7a83bc96985c21d06f740ab17393a997d15ca9035098168ed52e3db7fdf2","receipt":{"kind":"pith_receipt","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"694e7a83bc96985c21d06f740ab17393a997d15ca9035098168ed52e3db7fdf2","last_reissued_at":"2026-07-30T01:17:45.772981Z","signature_status":"unsigned_v0","first_computed_at":"2026-07-30T01:17:45.772981Z"},"source_kind":"arxiv","source_id":"2607.26228","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-30T01:17:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l2mZDkqaDBiLoEdAmbTWX3SHe7TbLFMBikTLi/0oON+H2LsAAaQvEh6DksIuE9BCefE3ww0pIDTNGHO9lqihBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T11:25:59.078445Z"},"content_sha256":"742c7efcb0ce1cc653149e251b618b446a163d10524d7e993ad3306cd06b0bef","schema_version":"1.0","event_id":"sha256:742c7efcb0ce1cc653149e251b618b446a163d10524d7e993ad3306cd06b0bef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:NFHHVA54S2MFYIOQN52AVMLTSO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Steering Instruction Hierarchies at Inference Time","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Han Zhao, Julia Hockenmaier, Sewoong Lee, Siqi Zeng","submitted_at":"2026-07-28T20:06:31Z","abstract_excerpt":"Instruction hierarchies are a core safety assumption of language model deployment: higher priority inputs, such as system prompts, should override conflicting lower priority inputs from users or tools. Yet frontier LLMs often violate this hierarchy. We introduce V-Steer, a training-free inference time method that restores privileged influence by editing cached value vectors at prompt positions. Using direct logit attribution on the first next token prediction, V-Steer identifies heads where lower priority spans dominate privileged ones, then boosts privileged spans and suppresses conflicting l"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.26228","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.26228/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-30T01:17:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KmWBpcf1i1rtsWeDP8Cw5kfHUZXjxdRoGchtgu258XijjJtkf65VwUGxAsZ/U9w3d+V/d4KIqApl4JxGNGP5BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T11:25:59.078970Z"},"content_sha256":"1f20243edd847da6f711a745b443b748dd2ff93fea24d60900306f63893ce3c6","schema_version":"1.0","event_id":"sha256:1f20243edd847da6f711a745b443b748dd2ff93fea24d60900306f63893ce3c6"},{"event_type":"integrity_finding","subject_pith_number":"pith:2026:NFHHVA54S2MFYIOQN52AVMLTSO","target":"integrity","payload":{"note":"DOI in the printed bibliography is fragmented by whitespace or line breaks. A longer candidate (10.18653/v1/2025.naacl-long.425) was visible in the surrounding text but could not be confirmed against doi.org as printed.","snippet":"Zhang, Zhihan and Li, Shiyang and Zhang, Zixuan and Liu, Xin and Jiang, Haoming and Tang, Xianfeng and Gao, Yifan and Li, Zheng and Wang, Haodong and Tan, Zhaoxuan and Li, Yichuan and Yin, Qingyu and Yin, Bing and Jiang, Meng. IHE val: Eval","arxiv_id":"2607.26228","detector":"doi_compliance","evidence":{"ref_index":10,"verdict_class":"incontrovertible","resolved_title":null,"printed_excerpt":"10.18653/v","reconstructed_doi":"10.18653/v1/2025.naacl-long.425"},"severity":"advisory","ref_index":10,"audited_at":"2026-08-01T00:33:35.686269Z","event_type":"pith.integrity.v1","detected_doi":"10.18653/v1/2025.naacl-long.425","detector_url":"https://pith.science/pith-integrity-protocol#doi_compliance","external_url":null,"finding_type":"recoverable_identifier","evidence_hash":"bd7225b04ee24c8293fc68f9b8b7cccf9d170edfd12680b793ef468300a93d7d","paper_version":1,"verdict_class":"incontrovertible","resolved_title":null,"detector_version":"1.1.0","detected_arxiv_id":null,"integrity_event_id":14737,"payload_sha256":"508931ac2bc74ae7e6542ec2e274240f1bbcb899b0d8e3ad1dfb559d8ef21dea","signature_b64":"UADglrICJvl1VW8LaMaPIO/zZbl4Imz3Aq3L5b3921IhzQRIVJSbkloOdk0f+mPdYv9zlOsCUByPRGxvJRnwBg==","signing_key_id":"pith-v1-2026-05"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-01T00:36:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SIrYnaBLtCh28jVEq8ReGgwASEDTiimKFUeYaMQH03f4jwtu0uWfU0KBFE4/iOHmDz385iJ2vgeXAiLedY5BAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T11:25:59.082875Z"},"content_sha256":"c2303515b408abe2aa4901b1172bce6fcf9f739866e713791d17137d40bd1e39","schema_version":"1.0","event_id":"sha256:c2303515b408abe2aa4901b1172bce6fcf9f739866e713791d17137d40bd1e39"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NFHHVA54S2MFYIOQN52AVMLTSO/bundle.json","state_url":"https://pith.science/pith/NFHHVA54S2MFYIOQN52AVMLTSO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NFHHVA54S2MFYIOQN52AVMLTSO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T11:25:59Z","links":{"resolver":"https://pith.science/pith/NFHHVA54S2MFYIOQN52AVMLTSO","bundle":"https://pith.science/pith/NFHHVA54S2MFYIOQN52AVMLTSO/bundle.json","state":"https://pith.science/pith/NFHHVA54S2MFYIOQN52AVMLTSO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NFHHVA54S2MFYIOQN52AVMLTSO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:NFHHVA54S2MFYIOQN52AVMLTSO","merge_version":"pith-open-graph-merge-v1","event_count":3,"valid_event_count":3,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8c660850af84e57d0a829b65724145a97b744bf9a579475a4a49c5cc0e6f967a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-07-28T20:06:31Z","title_canon_sha256":"0dbd7d296b394372dd5913c33962b184106bff2f35a8bf3e864ad8c1d004b337"},"schema_version":"1.0","source":{"id":"2607.26228","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.26228","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"arxiv_version","alias_value":"2607.26228v1","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.26228","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"pith_short_12","alias_value":"NFHHVA54S2MF","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"pith_short_16","alias_value":"NFHHVA54S2MFYIOQ","created_at":"2026-07-30T01:17:45Z"},{"alias_kind":"pith_short_8","alias_value":"NFHHVA54","created_at":"2026-07-30T01:17:45Z"}],"graph_snapshots":[{"event_id":"sha256:1f20243edd847da6f711a745b443b748dd2ff93fea24d60900306f63893ce3c6","target":"graph","created_at":"2026-07-30T01:17:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.26228/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Instruction hierarchies are a core safety assumption of language model deployment: higher priority inputs, such as system prompts, should override conflicting lower priority inputs from users or tools. Yet frontier LLMs often violate this hierarchy. We introduce V-Steer, a training-free inference time method that restores privileged influence by editing cached value vectors at prompt positions. Using direct logit attribution on the first next token prediction, V-Steer identifies heads where lower priority spans dominate privileged ones, then boosts privileged spans and suppresses conflicting l","authors_text":"Han Zhao, Julia Hockenmaier, Sewoong Lee, Siqi Zeng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-07-28T20:06:31Z","title":"Steering Instruction Hierarchies at Inference Time"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.26228","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:742c7efcb0ce1cc653149e251b618b446a163d10524d7e993ad3306cd06b0bef","target":"record","created_at":"2026-07-30T01:17:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8c660850af84e57d0a829b65724145a97b744bf9a579475a4a49c5cc0e6f967a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2026-07-28T20:06:31Z","title_canon_sha256":"0dbd7d296b394372dd5913c33962b184106bff2f35a8bf3e864ad8c1d004b337"},"schema_version":"1.0","source":{"id":"2607.26228","kind":"arxiv","version":1}},"canonical_sha256":"694e7a83bc96985c21d06f740ab17393a997d15ca9035098168ed52e3db7fdf2","receipt":{"builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"694e7a83bc96985c21d06f740ab17393a997d15ca9035098168ed52e3db7fdf2","first_computed_at":"2026-07-30T01:17:45.772981Z","kind":"pith_receipt","last_reissued_at":"2026-07-30T01:17:45.772981Z","receipt_version":"0.3","signature_status":"unsigned_v0"},"source_id":"2607.26228","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:742c7efcb0ce1cc653149e251b618b446a163d10524d7e993ad3306cd06b0bef","sha256:1f20243edd847da6f711a745b443b748dd2ff93fea24d60900306f63893ce3c6","sha256:c2303515b408abe2aa4901b1172bce6fcf9f739866e713791d17137d40bd1e39"],"state_sha256":"4794a199baa40b08275398e64b699172bd900d2156611487b713a670db9075b8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ciyJLcfASLZDhaHfjOyuevInJxMCDGQWVA8awt07Nr5WVEqhd07/SX93hnJYRPM2AdwcYpeX+QwKi1daWc1tCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T11:25:59.086423Z","bundle_sha256":"6a6ba73a889e5e4216d8e35ef7ea12e7ad9714803abd2295b1374fb9f23f7fe2"}}